CVE-2017-11406: High severity Wireshark Wireshark vulnerability
Published Jul 18, 2017
·Updated
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values.
Affected Software
3 affected components
Wireshark Wireshark>=2.0.0<=2.0.13
Wireshark Wireshark>=2.2.0<=2.2.7
Debian Debian Linux=8.0
Remediation
Patch Available
Event History
Jul 18, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11406?
CVE-2017-11406 is classified as a medium severity vulnerability.
2
How do I fix CVE-2017-11406?
To fix CVE-2017-11406, update Wireshark to version 2.2.8 or later, or 2.0.14 or later.
3
What versions of Wireshark are affected by CVE-2017-11406?
Wireshark versions 2.0.0 to 2.0.13 and 2.2.0 to 2.2.7 are affected by CVE-2017-11406.
4
What component of Wireshark is impacted by CVE-2017-11406?
CVE-2017-11406 affects the DOCSIS dissector component of Wireshark.
5
What type of issue does CVE-2017-11406 cause in Wireshark?
CVE-2017-11406 can cause Wireshark to enter an infinite loop when processing certain input.