CVE-2017-7700: Medium severity Wireshark Wireshark vulnerability
Published Apr 12, 2017
·Updated
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size.
Affected Software
3 affected components
Wireshark Wireshark>=2.0.0<=2.0.11
Wireshark Wireshark>=2.2.0<=2.2.5
Debian Debian Linux=8.0
Remediation
Patch Available
Event History
Apr 12, 2017
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
via NVD·11:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-7700?
CVE-2017-7700 has been rated as a medium severity vulnerability due to the potential for denial of service.
2
How do I fix CVE-2017-7700?
To fix CVE-2017-7700, upgrade Wireshark to version 2.2.6 or higher, or 2.0.12 or higher.
3
What kind of attack does CVE-2017-7700 mitigate against?
CVE-2017-7700 mitigates against denial of service attacks caused by malformed packet capture files.
4
What versions of Wireshark are affected by CVE-2017-7700?
CVE-2017-7700 affects Wireshark versions 2.0.0 to 2.0.11 and 2.2.0 to 2.2.5.
5
Is CVE-2017-7700 specific to any operating system?
CVE-2017-7700 is not specific to any operating system, but affects Wireshark installations across platforms including Debian.