VYPR
High severity7.5NVD Advisory· Published Aug 30, 2017· Updated May 13, 2026

CVE-2017-13766

CVE-2017-13766

Description

In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation.

Affected products

23
  • Wireshark/Wireshark23 versions
    cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*+ 22 more
    • cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.12:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.13:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.