OSS-Fuzz

2 exploits Active since Jun 2017

CVE-2017-9347 EXPLOITDB HIGH text WRITEUP

Wireshark 2.2.0-2.2.6 - Use After Free

In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID.

CVSS 7.5

View Code

CVE-2017-9353 EXPLOITDB HIGH text WORKING POC

Wireshark <2.2.7 - Buffer Overflow

In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by validating an IPv6 address.

CVSS 7.5

View Code