CVE-2018-7417

Description

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the IPMI dissector could crash. This was addressed in epan/dissectors/packet-ipmi-picmg.c by adding support for crafted packets that lack an IPMI header.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.401

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Wireshark (X64) 2.4.4	Windows
Multiple vulnerabilities affected in Wireshark 2.4.4	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-343288	Wireshark (X64) (4.4.2)
PATCH-338541	Wireshark (3.6.24)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234