CVE-2017-15192 : In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by considering a case where not all of the BTATT packets have the same encapsulation level.

Published 2017-10-10 21:29:00

Updated 2019-10-03 00:03:26

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2017-15192

Wireshark » Wireshark » Version: 2.2.0
cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 2.2.1
cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 2.2.4
cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 2.2.5
cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 2.2.2
cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 2.2.3
cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 2.2.7
cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 2.2.6
cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 2.4.0
cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 2.4.1
cpe:2.3:a:wireshark:wireshark:2.4.1:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 2.2.9
cpe:2.3:a:wireshark:wireshark:2.2.9:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 2.2.8
cpe:2.3:a:wireshark:wireshark:2.2.8:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2017-15192

EPSS FAQ

0.23%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 61 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-15192

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

References for CVE-2017-15192

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14049

14049 – [oss-fuzz] UBSAN: load of null pointer of type 'guint16' (aka 'unsigned short') in packet-btatt.c:10019:103
Issue Tracking;Vendor Advisory
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3689dc1db36037436b1616715f9a3f888fc9a0f6

code.wireshark Code Review - wireshark.git/commit
Patch;Vendor Advisory
http://www.securityfocus.com/bid/101235

Wireshark BT ATT Dissector 'epan/dissectors/packet-btatt.c' Denial of Service Vulnerability
Third Party Advisory;VDB Entry
https://www.wireshark.org/security/wnpa-sec-2017-42.html

Wireshark · wnpa-sec-2017-42 · BT ATT dissector crash
Vendor Advisory
https://code.wireshark.org/review/23470

Change Ica5d8af8: BTATT: add curr_layer_num to key tracking request / response | code.wireshark Code Review
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2017-15192

Products affected by CVE-2017-15192

Exploit prediction scoring system (EPSS) score for CVE-2017-15192

CVSS scores for CVE-2017-15192

References for CVE-2017-15192