CVE-2017-13764: Wireshark

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation.

Affected products

• Wireshark Wireshark: version 2.4.0 only

Published 2017-08-30. Last modified 2026-06-17.