CVE-2017-13765

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/100551Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039254Third Party Advisory, VDB Entry
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13929Issue Tracking, Patch, Vendor Advisory
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=94666d4357096fc45e3bcad3d9414a14f0831bc8
https://lists.debian.org/debian-lts-announce/2019/01/msg00010.htmlMailing List, Third Party Advisory
https://www.wireshark.org/security/wnpa-sec-2017-41.htmlVendor Advisory
http://www.securityfocus.com/bid/100551Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039254Third Party Advisory, VDB Entry
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13929Issue Tracking, Patch, Vendor Advisory
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=94666d4357096fc45e3bcad3d9414a14f0831bc8
https://lists.debian.org/debian-lts-announce/2019/01/msg00010.htmlMailing List, Third Party Advisory
https://www.wireshark.org/security/wnpa-sec-2017-41.htmlVendor Advisory

Timeline

Published: Aug 30, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-137667.5In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/pro CVE-2017-137677.5In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This was addressed in epan/disse CVE-2017-137686.5Null Pointer Dereference in the IdentifyImage function in MagickCore/identify.c in ImageMagick through 7.0.6-10 allows an attacker to perfor CVE-2017-137696.5The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buff CVE-2017-13774.3IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force CVE-2017-137719.8Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which CVE-2017-137728.8Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arb CVE-2017-137747.8Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors.CVE-2017-137756.5GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may CVE-2017-137766.5GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results CVE-2017-137776.5GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results CVE-2017-137786.1Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter.