CVE-2017-7701
- EPSS 0.53%
- Published 12.04.2017 23:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type.
CVE-2017-7702
- EPSS 0.53%
- Published 12.04.2017 23:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation.
CVE-2017-7703
- EPSS 0.92%
- Published 12.04.2017 23:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly.
CVE-2017-7704
- EPSS 0.53%
- Published 12.04.2017 23:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return...
CVE-2017-7705
- EPSS 0.53%
- Published 12.04.2017 23:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for g...
CVE-2017-7745
- EPSS 0.33%
- Published 12.04.2017 23:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check...
CVE-2017-7746
- EPSS 2.05%
- Published 12.04.2017 23:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining leng...
CVE-2017-7747
- EPSS 2.05%
- Published 12.04.2017 23:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree.
CVE-2017-7748
- EPSS 0.33%
- Published 12.04.2017 23:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check.
CVE-2016-7957
- EPSS 0.33%
- Published 12.04.2017 10:59:00
- Last modified 20.04.2025 01:37:25
In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-btl2cap.c by avoiding use of a seven-byte memcmp for potentially shorter strings.