CVE-2017-9347 Null dereference in n/a
A NULL pointer dereference in the ROS dissector allows attackers to crash Wireshark, requiring an upgrade to the latest version.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-9347?
CVE-2017-9347 is a high-severity vulnerability in Wireshark Wireshark, published on 2 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID.
Weakness: CWE-476
Which versions are affected by CVE-2017-9347?
It affects 1 product.
Products include Wireshark Wireshark.
How do I fix CVE-2017-9347?
Upgrade to a fixed version.
Is CVE-2017-9347 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2017-9347 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Wireshark Wireshark
Sources
Also known as ALPINE-CVE-2017-9347, DEBIAN-CVE-2017-9347, GHSA-59gv-v2r5-5289, UBUNTU-CVE-2017-9347.