CVE-2017-13764 Null dereference in n/a
A NULL pointer dereference in the Wireshark Modbus dissector allows attackers to cause a denial of service via crafted packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-13764?
CVE-2017-13764 is a high-severity vulnerability in Wireshark Wireshark, published on 30 Aug 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation.
Weakness: CWE-476
Which versions are affected by CVE-2017-13764?
It affects 1 product.
Products include Wireshark Wireshark.
How do I fix CVE-2017-13764?
Apply the vendor's patch.
Is CVE-2017-13764 being exploited?
There is no known exploitation of CVE-2017-13764 in the wild and no public exploit code.
Other vulnerabilities in Wireshark Wireshark
Sources
Also known as DEBIAN-CVE-2017-13764, GHSA-hvvw-753h-39jv, UBUNTU-CVE-2017-13764.