CVE-2017-6468: Input Validation
Published Mar 4, 2017
·Updated
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records.
Affected Software
3 affected components
Wireshark Wireshark>=2.0.0<=2.0.10
Wireshark Wireshark>=2.2.0<=2.2.4
Debian Debian Linux=8.0
Remediation
Patch Available
Event History
Mar 4, 2017
CVE Published
via MITRE·03:38 AM
Data Sourced
via MITRE·03:38 AM
Description
Data Sourced
via NVD·03:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-6468?
CVE-2017-6468 has been classified as a high severity vulnerability due to its potential to cause application crashes.
2
How do I fix CVE-2017-6468?
To fix CVE-2017-6468, upgrade Wireshark to version 2.2.5 or later, as it addresses the vulnerability.
3
Which versions of Wireshark are affected by CVE-2017-6468?
CVE-2017-6468 affects Wireshark versions 2.0.0 to 2.0.10 and 2.2.0 to 2.2.4.
4
What type of issue does CVE-2017-6468 represent in Wireshark?
CVE-2017-6468 represents a crash issue triggered by processing a malformed NetScaler capture file.
5
Is there a workaround for CVE-2017-6468?
There are no specific workarounds for CVE-2017-6468, so updating to the latest version is recommended.