CVE-2017-9344
CVE-2017-9344
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by zero. This was addressed in epan/dissectors/packet-btl2cap.c by validating an interval value.
CVSS 7.5 · High · EPSS 2.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
wireshark Debian:12
- Affected ranges
- ECOSYSTEM: < 2.2.7-1
Update to 2.2.7-1
wireshark Debian:13
- Affected ranges
- ECOSYSTEM: < 2.2.7-1
Update to 2.2.7-1
wireshark Debian:14
- Affected ranges
- ECOSYSTEM: < 2.2.7-1
Update to 2.2.7-1
wireshark Ubuntu:14.04:LTS
- Versions
- 1.10.2-1
- 1.10.3-1
- 1.10.5-1ubuntu1
- 1.10.5-2
- 1.10.6-1
- 1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1
- Affected ranges
- ECOSYSTEM: < 2.6.3-1~ubuntu14.04.1
Update to 2.6.3-1~ubuntu14.04.1
wireshark Ubuntu:16.04:LTS
- Versions
- 1.12.7+g7fc8978-1
- 1.12.8+g5b6e543-2
- 2.0.1+g59ea380-3build1
- 2.0.2+ga16e22e-1
- 2.2.6+g32dac6a-2ubuntu0.16.04
- Affected ranges
- ECOSYSTEM: < 2.6.3-1~ubuntu16.04.1
Update to 2.6.3-1~ubuntu16.04.1
wireshark Ubuntu:18.04:LTS
- Versions
- 2.4.2-1
- 2.4.3-1
- 2.4.4-1
- 2.4.5-1
- Affected ranges
- ECOSYSTEM: < 2.6.3-1~ubuntu18.04.1
Update to 2.6.3-1~ubuntu18.04.1
Original sources
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13701
- https://www.wireshark.org/security/wnpa-sec-2017-29.html
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1539
- http://www.securitytracker.com/id/1038612
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6308ae03d82a29a2e3d75e1c325c8a9f6c44dcdf
- http://www.securityfocus.com/bid/98796
- https://lists.debian.org/debian-lts-announce/2019/03/msg00031.html
- https://nvd.nist.gov/vuln/detail/CVE-2017-9344