Infinite loop in Wireshark

1) Infinite loop

EUVDB-ID: #VU33536

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2017-7704

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Wireshark: 2.2.0 - 2.2.5

CPE2.3

• cpe:2.3:a:wireshark_org:wireshark:2.2.5:*:*:*:*:*:*:*

External links

http://www.securityfocus.com/bid/97634
http://www.securitytracker.com/id/1038262
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13453
http://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6032b0fe5fc1176ab77e03e20765f95fbd21b19e
http://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=da53a90b6895e47e03c5de05edf84bd99d535fd8
http://security.gentoo.org/glsa/201706-12
http://www.wireshark.org/security/wnpa-sec-2017-17.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.