CVE-2017-11407
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed...
7.5 HighFix available
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
3.03%Up 1.6 points since Apr 14, 2021
What each source reports
NVD Score used
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
- Record
CVE-2017-11407- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
- Record
CVE-2017-11407- Updated
- 2026-11-02
EUVDEUVD-2017-3034 No score
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
- Record
EUVD-2017-3034- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xh7w-hjwx-8jc2
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed...
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
- Record
GHSA-xh7w-hjwx-8jc2- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSVALPINE-CVE-2017-11407
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
- Record
ALPINE-CVE-2017-11407- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
- Record
CVE-2017-11407- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSVDEBIAN-CVE-2017-11407
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
- Record
DEBIAN-CVE-2017-11407- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-11407
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
- Record
UBUNTU-CVE-2017-11407- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2017-0219 No score
Updated wireshark packages fix security vulnerabilities
The wireshark package has been updated to version 2.0.14, which fixes several security issues where a malformed packet trace could cause it to crash or go into an infinite loop, and fixes several other bugs as well. See the release notes for details.
- Record
MGASA-2017-0219- Updated
- 2026-11-02
OSVMGASA-2017-0226 No score
Updated wireshark packages fix security vulnerabilities
The wireshark package has been updated to version 2.2.8, which fixes several security issues where a malformed packet trace could cause it to crash or go into an infinite loop, and fixes several other bugs as well. See the release notes for details.
- Record
MGASA-2017-0226- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11513-1 No score
libwireshark14-3.4.8-1.2 on GA media
These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11513-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:2032-1 No score
Security update for wireshark
This wireshark update to version 2.2.8 fixes the following issues:
Security issues fixed:
- CVE-2017-11411: The openSAFETY dissectorcould crash or exhaust system memory because of missing length validation. (bsc#1049621)
- CVE-2017-11410: The WBXML dissector could go into an infinite loop. (bsc#1049255)
- CVE-2017-11408: The AMQP dissector could crash. (bsc#1049255)
- CVE-2017-11407: The MQ dissector could crash. (bsc#1049255)
- CVE-2017-11406: The DOCSIS dissector could go into an infinite loop. (bsc#1049255)
- Record
SUSE-SU-2017:2032-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:2033-1 No score
Security update for wireshark
This wireshark update to version 2.2.8 fixes the following issues:
Security issues fixed:
- CVE-2017-11411: The openSAFETY dissectorcould crash or exhaust system memory because of missing length validation. (bsc#1049621)
- CVE-2017-11410: The WBXML dissector could go into an infinite loop. (bsc#1049255)
- CVE-2017-11408: The AMQP dissector could crash. (bsc#1049255)
- CVE-2017-11407: The MQ dissector could crash. (bsc#1049255)
- CVE-2017-11406: The DOCSIS dissector could go into an infinite loop. (bsc#1049255)
- Record
SUSE-SU-2017:2033-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.5 |
2.0.0 up to 2.2.8-r0 | 2.2.8-r0 |
wiresharkDebian:12 |
before 2.4.0-1 | 2.4.0-1 |
wiresharkDebian:13 |
before 2.4.0-1 | 2.4.0-1 |
wiresharkDebian:14 |
before 2.4.0-1 | 2.4.0-1 |
wiresharkDebian:8 From an advisory covering 41 CVEs |
before 1.12.1+g01b65bf-4+deb8u16, plus listed versions 1.12.1+g01b65bf-41.12.1+g01b65bf-4+deb8u11.12.1+g01b65bf-4+deb8u101.12.1+g01b65bf-4+deb8u111.12.1+g01b65bf-4+deb8u12 Show 22 moreShow less1.12.1+g01b65bf-4+deb8u131.12.1+g01b65bf-4+deb8u141.12.1+g01b65bf-4+deb8u151.12.1+g01b65bf-4+deb8u21.12.1+g01b65bf-4+deb8u31.12.1+g01b65bf-4+deb8u41.12.1+g01b65bf-4+deb8u51.12.1+g01b65bf-4+deb8u61.12.1+g01b65bf-4+deb8u6~deb7u11.12.1+g01b65bf-4+deb8u6~deb7u101.12.1+g01b65bf-4+deb8u6~deb7u111.12.1+g01b65bf-4+deb8u6~deb7u21.12.1+g01b65bf-4+deb8u6~deb7u31.12.1+g01b65bf-4+deb8u6~deb7u41.12.1+g01b65bf-4+deb8u6~deb7u51.12.1+g01b65bf-4+deb8u6~deb7u61.12.1+g01b65bf-4+deb8u6~deb7u71.12.1+g01b65bf-4+deb8u6~deb7u81.12.1+g01b65bf-4+deb8u6~deb7u91.12.1+g01b65bf-4+deb8u71.12.1+g01b65bf-4+deb8u81.12.1+g01b65bf-4+deb8u9 |
1.12.1+g01b65bf-4+deb8u16 |
wiresharkMageia:5 From an advisory covering 6 CVEs |
before 2.0.14-1.mga5 | 2.0.14-1.mga5 |
wiresharkMageia:6 From an advisory covering 5 CVEs |
before 2.2.8-1.mga6 | 2.2.8-1.mga6 |
wiresharkSUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 5 CVEs |
before 2.0.14-40.7.1 | 2.0.14-40.7.1 |
wiresharkSUSE:Linux Enterprise Server 11 SP4 From an advisory covering 5 CVEs |
before 2.0.14-40.7.1 | 2.0.14-40.7.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 5 CVEs |
before 2.0.14-40.7.1 | 2.0.14-40.7.1 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkSUSE:Linux Enterprise Desktop 12 SP2 From an advisory covering 5 CVEs |
before 2.2.8-48.6.1 | 2.2.8-48.6.1 |
wiresharkSUSE:Linux Enterprise Desktop 12 SP3 From an advisory covering 5 CVEs |
before 2.2.8-48.6.1 | 2.2.8-48.6.1 |
wiresharkSUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 From an advisory covering 5 CVEs |
before 2.2.8-48.6.1 | 2.2.8-48.6.1 |
wiresharkSUSE:Linux Enterprise Software Development Kit 12 SP2 From an advisory covering 5 CVEs |
before 2.2.8-48.6.1 | 2.2.8-48.6.1 |
wiresharkSUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 5 CVEs |
before 2.2.8-48.6.1 | 2.2.8-48.6.1 |
wiresharkSUSE:Linux Enterprise Server 12 SP2 From an advisory covering 5 CVEs |
before 2.2.8-48.6.1 | 2.2.8-48.6.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 5 CVEs |
before 2.2.8-48.6.1 | 2.2.8-48.6.1 |
wiresharkSUSE:Linux Enterprise Server 12 SP3 From an advisory covering 5 CVEs |
before 2.2.8-48.6.1 | 2.2.8-48.6.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 5 CVEs |
before 2.2.8-48.6.1 | 2.2.8-48.6.1 |
wiresharkUbuntu:14.04:LTS |
before 2.6.3-1~ubuntu14.04.1, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-11.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1 |
2.6.3-1~ubuntu14.04.1 |
wiresharkUbuntu:16.04:LTS |
before 2.6.3-1~ubuntu16.04.1, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 |
2.6.3-1~ubuntu16.04.1 |
wiresharkUbuntu:18.04:LTS |
before 2.6.3-1~ubuntu18.04.1, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-1 |
2.6.3-1~ubuntu18.04.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 163 CVEs |
before 3.4.8-1.2 | 3.4.8-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-11407 is a high vulnerability (CVSS 7.5) in Wireshark, published July 18, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.03%, the 87th percentile. Fixed in wireshark 2.2.8-r0.
References
code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4e54dae7f0d7840836ee6d5ce1e688f152ab2978
bugs.wireshark.org/bugzilla/show_bug.cgi?id=13792
lists.debian.org/debian-lts-announce/2019/01/msg00010.html
securityfocus.com/bid/99910
securitytracker.com/id/1038966
wireshark.org/security/wnpa-sec-2017-35.html
Show 188 moreShow less
nvd.nist.gov/vuln/detail/CVE-2017-11407
github.com/advisories/GHSA-xh7w-hjwx-8jc2
security.alpinelinux.org/vuln/CVE-2017-11407
security-tracker.debian.org/tracker/CVE-2017-11407
advisories.mageia.org/MGASA-2017-0219.html
bugs.mageia.org/show_bug.cgi?id=21315
suse.com/support/update/announcement/2017/suse-su-20172032-1
bugzilla.suse.com/1049255
ubuntu.com/security/CVE-2017-11407
cve.org/CVERecord?id=CVE-2017-11407