CVE-2017-15193

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-15193
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-15193.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-15193
Downstream
Related
Published
2017-10-10T21:29:00.493Z
Modified
2026-04-16T01:44:25.018376394Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-mbim.c by changing the memory-allocation approach.

References

Affected packages

Git / github.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://github.com/wireshark/wireshark
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5368c50be46d4a44986d12bdfc0a35b42c0f34fc
Last affected
a6fbd278e2d72ed3524995464c86929b51867802
Last affected
775fb085cdfebafa565c5b428f0a130d82dbefcb
Last affected
57531cdd46cf170524c1fbbfd2c44132bb36e7c6
Last affected
cc3dc1b648d341a489fb95faef3795d8cb2b6192
Last affected
440fd4d501cf0e5aa319a97d0f874641d733e4a1
Last affected
32dac6a1ea518cb0062c139e2b3df298afc93c30
Last affected
1861a96ba1d22e80e331373cf44df029d356ec42
Last affected
a9ebe59292ad3a7fff82a95bc528de48b54f9ade
Last affected
34f34aa504c473a12024d5377dbe7924403aa387
Last affected
9be0fa500da594ed01baf3214642838d22811c90
Last affected
f42a0d2b6c659aff0390ab28e91bdd37423fe164
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0"
        },
        {
            "last_affected": "2.2.1"
        },
        {
            "last_affected": "2.2.2"
        },
        {
            "last_affected": "2.2.3"
        },
        {
            "last_affected": "2.2.4"
        },
        {
            "last_affected": "2.2.5"
        },
        {
            "last_affected": "2.2.6"
        },
        {
            "last_affected": "2.2.7"
        },
        {
            "last_affected": "2.2.8"
        },
        {
            "last_affected": "2.2.9"
        },
        {
            "last_affected": "2.4.0"
        },
        {
            "last_affected": "2.4.1"
        }
    ],
    "source": "CPE_FIELD",
    "cpe": [
        "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.2.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.2.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.4.1:*:*:*:*:*:*:*"
    ]
}

Affected versions

2.*
2.2.1rc0
Other
backups/ethereal@18706
ethereal-0-3-15
start
ethereal-0.*
ethereal-0.3.15
v1.*
v1.11.0
v1.11.0-rc1
v1.11.1
v1.11.1-rc1
v1.11.2
v1.11.2-rc1
v1.11.3
v1.11.3-rc1
v1.11.4-rc1
v1.99.0
v1.99.0-rc1
v1.99.1
v1.99.10rc0
v1.99.1rc0
v1.99.2
v1.99.2rc0
v1.99.3
v1.99.3rc0
v1.99.4
v1.99.4rc0
v1.99.5
v1.99.5rc0
v1.99.6
v1.99.6rc0
v1.99.7
v1.99.7rc0
v1.99.8
v1.99.8rc0
v1.99.9
v1.99.9rc0
v2.*
v2.1.0
v2.1.0rc0
v2.1.1
v2.1.1rc0
v2.1.2rc0
v2.2.0
v2.2.0rc0
v2.2.0rc1
v2.2.0rc2
v2.2.1
v2.2.1rc0
v2.2.2
v2.2.2rc0
v2.2.3
v2.2.3rc0
v2.2.4
v2.2.4rc0
v2.2.5
v2.2.5rc0
v2.2.6
v2.2.6rc0
v2.2.7
v2.2.7rc0
v2.2.8
v2.2.8rc0
v2.2.9
v2.2.9rc0
v2.3.0rc0
v2.4.0
v2.4.0rc0
v2.4.0rc1
v2.4.0rc2
v2.4.1
v2.4.1rc0
wireshark-1.*
wireshark-1.11.3
wireshark-1.99.0
wireshark-1.99.1
wireshark-1.99.2
wireshark-1.99.3
wireshark-1.99.4
wireshark-1.99.5
wireshark-1.99.6
wireshark-1.99.7
wireshark-1.99.8
wireshark-1.99.9
wireshark-2.*
wireshark-2.1.0
wireshark-2.1.1
wireshark-2.2.0
wireshark-2.2.0rc1
wireshark-2.2.0rc2
wireshark-2.2.1
wireshark-2.2.2
wireshark-2.2.3
wireshark-2.2.4
wireshark-2.2.5
wireshark-2.2.6
wireshark-2.2.7
wireshark-2.2.8
wireshark-2.2.9
wireshark-2.4.0
wireshark-2.4.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-15193.json"