Infinite loop in wireshark (Alpine package)

1) Infinite loop

EUVDB-ID: #VU6908

Risk: Low

CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2017-9346

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

Description

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to infinite loop in the SoulSeek dissector when making loop bounds more explicit. A remote attacker can inject a malformed packet epan/dissectors/packet-slsk.c onto the wire or persuade the target user to read a malformed packet trace file and cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.

Mitigation

Install update from vendor's website.

Vulnerable software versions

wireshark (Alpine package): 2.0.4-r0 - 2.0.12-r0

CPE2.3

• cpe:2.3:o:alpine:wireshark_alpine_package:2.0.5-r0:*:*:*:*:alpine_linux:*:
• cpe:2.3:o:alpine:wireshark_alpine_package:2.0.4-r0:*:*:*:*:alpine_linux:*:
• cpe:2.3:o:alpine:wireshark_alpine_package:2.0.6-r0:*:*:*:*:alpine_linux:*:

External links

http://git.alpinelinux.org/aports/commit/?id=9a266b0bdb88c3710446f1c69818d9ecf8ce4d75
http://git.alpinelinux.org/aports/commit/?id=c391ebdf94fe2d08dd67176f88fa086e00472396
http://git.alpinelinux.org/aports/commit/?id=e60cdc58fdbbe1c315e9327497e04e61dd8bd4b4
http://git.alpinelinux.org/aports/commit/?id=012e5b8ddaa5ad3353e0df651fd6b2f2097705ab

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.