CVE-2017-6473: Input Validation
Published Mar 4, 2017
·Updated
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets.
Affected Software
3 affected components
Wireshark Wireshark>=2.0.0<=2.0.10
Wireshark Wireshark>=2.2.0<=2.2.4
Debian Debian Linux=8.0
Remediation
Patch Available
Event History
Mar 4, 2017
CVE Published
via MITRE·03:38 AM
Data Sourced
via MITRE·03:38 AM
Description
Data Sourced
via NVD·03:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-6473?
CVE-2017-6473 has a medium severity level due to its potential to cause application crashes.
2
How do I fix CVE-2017-6473?
To fix CVE-2017-6473, update Wireshark to version 2.2.5 or later for the 2.2.x series, or to version 2.0.11 or later for the 2.0.x series.
3
What software is affected by CVE-2017-6473?
CVE-2017-6473 affects Wireshark versions 2.0.0 to 2.0.10 and 2.2.0 to 2.2.4.
4
What type of vulnerability is CVE-2017-6473?
CVE-2017-6473 is a denial of service vulnerability caused by a crash in the K12 file parser.
5
Is there a known exploit for CVE-2017-6473?
As of now, there are no publicly known exploits targeting CVE-2017-6473 reported.