PT-2017-16832 · Wireshark+2 · Wireshark+2

Chris Maixner · Publicado 2017-02-17 · Atualizado 2019-10-03 · CVE-2017-6014

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.4 and earlier

Description A crafted or malformed STANAG 4607 capture file can cause an infinite loop and memory exhaustion. This occurs when the packet size field in a packet header is null, resulting in continuous attempts to read the same zero-length packet, which quickly exhausts all system memory.

Recommendations For Wireshark versions 2.2.4 and earlier, consider updating to a newer version to mitigate the risk of memory exhaustion due to malformed capture files. As a temporary workaround, avoid opening crafted or malformed STANAG 4607 capture files until a patch is available.

Correção

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2017-1260

CVE-2017-6014

DLA-826-1

DSA-3811-1

MGASA-2017-0076

SUSE-SU-2017:1174-1

SUSE-SU-2017:1442-1

Produtos afetados

Alt Linux

Suse

Wireshark

Referências · 100

• https://wireshark.org/security/wnpa-sec-2017-08.html · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2017-6014 · Nota
• https://suse.com/security/cve/CVE-2017-6014 · Nota
• https://suse.com/security/cve/CVE-2017-5596 · Nota
• https://bugzilla.suse.com/1010735 · Nota
• https://wireshark.org/security/wnpa-sec-2017-05.html · Nota
• https://bugzilla.suse.com/1025913 · Nota
• https://suse.com/security/cve/CVE-2017-7745 · Nota
• https://suse.com/security/cve/CVE-2017-7747 · Nota
• https://suse.com/security/cve/CVE-2017-7746 · Nota
• https://bugzilla.suse.com/1033936 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-6014 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-7701 · Nota
• https://bugzilla.suse.com/998761 · Nota
• https://bugzilla.suse.com/1027692 · Nota