vulnerability

Wireshark : CVE-2017-13764 : Modbus dissector crash

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Aug 30, 2017
Added
Oct 4, 2017
Modified
Nov 27, 2024

Description

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation.

Solution

wireshark-upgrade-2_4_1
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.