PT-2017-16832 · Wireshark+2 · Wireshark+2

Chris Maixner · Published 2017-02-17 · Updated 2019-10-03 · CVE-2017-6014

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.4 and earlier

Description A crafted or malformed STANAG 4607 capture file can cause an infinite loop and memory exhaustion. This occurs when the packet size field in a packet header is null, resulting in continuous attempts to read the same zero-length packet, which quickly exhausts all system memory.

Recommendations For Wireshark versions 2.2.4 and earlier, consider updating to a newer version to mitigate the risk of memory exhaustion due to malformed capture files. As a temporary workaround, avoid opening crafted or malformed STANAG 4607 capture files until a patch is available.

Fix

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

ALT-PU-2017-1260

CVE-2017-6014

DLA-826-1

DSA-3811-1

MGASA-2017-0076

SUSE-SU-2017:1174-1

SUSE-SU-2017:1442-1

Affected Products

Alt Linux

Suse

Wireshark

References · 100

• https://osv.dev/vulnerability/DEBIAN-CVE-2017-6014 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5597 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6014 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2017-6014 · Vendor Advisory
• https://security.gentoo.org/glsa/201706-12 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:1442-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6470 · Security Note
• http://debian.org/security/2017/dsa-3811 · Vendor Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13416 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2017-1260 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6472 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2017-6014 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6467 · Security Note
• https://advisories.mageia.org/MGASA-2017-0076.html · Security Note
• https://security-tracker.debian.org/tracker/source-package/wireshark · Vendor Advisory