The s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Aug 30, 2017 | Jan 4, 2016 |
| Debian | — | Upgrade wireshark | Jul 30, 2024 | Jan 4, 2016 |
| Gentoo Linux | — | Upgrade net-analyzer/wireshark. | Oct 30, 2017 | Jan 4, 2016 |
| Suse | — | Upgrade libwiretap10Upgrade libwireshark9Upgrade libwiretap7Upgrade libwsutil11Upgrade libwsutil8Upgrade wireshark-ui-qtUpgrade libwireshark13Upgrade libwscodecs1Upgrade wiresharkUpgrade wireshark-devel | Dec 9, 2016 | Jan 4, 2016 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Jan 4, 2016 |
| Wireshark | — | Upgrade to Wireshark version 2.0.1 | Oct 4, 2017 | Jan 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub