CVE-2017-7705: High severity Wireshark Wireshark vulnerability
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/wiresharkto a version that resolves this vulnerability.Fixed in 2.2.6-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7705?
CVE-2017-7705 is categorized as a medium severity vulnerability.
How do I fix CVE-2017-7705?
To fix CVE-2017-7705, you should upgrade to Wireshark version 2.2.6 or later.
What versions of Wireshark are affected by CVE-2017-7705?
Versions 2.0.0 to 2.0.11 and 2.2.0 to 2.2.5 of Wireshark are affected by CVE-2017-7705.
What type of attack can exploit CVE-2017-7705?
CVE-2017-7705 can be exploited through packet injection or by using a malformed capture file.
What components of Wireshark are impacted by CVE-2017-7705?
CVE-2017-7705 impacts the RPC over RDMA dissector in Wireshark.