CVE-2017-7704: High severity Wireshark Wireshark vulnerability
In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7704?
CVE-2017-7704 is considered a medium severity vulnerability due to the potential for denial of service through an infinite loop.
How do I fix CVE-2017-7704?
To fix CVE-2017-7704, upgrade Wireshark to version 2.2.6 or later, where the vulnerability has been addressed.
What versions of Wireshark are affected by CVE-2017-7704?
CVE-2017-7704 affects Wireshark versions 2.2.0 to 2.2.5.
What impact can CVE-2017-7704 have on users?
CVE-2017-7704 can lead to a denial of service by causing Wireshark to become unresponsive due to an infinite loop.
Is CVE-2017-7704 a remote exploit?
CVE-2017-7704 can be triggered through packet injection or a malformed capture file, making it a potential remote exploit.