CVE-2017-9345: High severity Wireshark Wireshark vulnerability
Published Jun 2, 2017
·Updated
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers.
Affected Software
2 affected components
Wireshark Wireshark>=2.0.0<=2.0.12
Wireshark Wireshark>=2.2.0<=2.2.6
Remediation
Patch Available
Event History
Jun 2, 2017
CVE Published
via MITRE·05:04 AM
Data Sourced
via MITRE·05:04 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9345?
The severity of CVE-2017-9345 is considered medium due to the potential for an infinite loop in the DNS dissector.
2
How do I fix CVE-2017-9345?
To fix CVE-2017-9345, update Wireshark to version 2.2.7 or later, or to version 2.0.13 or later.
3
What versions of Wireshark are affected by CVE-2017-9345?
CVE-2017-9345 affects Wireshark versions from 2.0.0 to 2.0.12 and from 2.2.0 to 2.2.6.
4
What type of vulnerability is CVE-2017-9345?
CVE-2017-9345 is a denial of service vulnerability due to an infinite loop in the DNS dissector.
5
Can CVE-2017-9345 be exploited remotely?
Yes, CVE-2017-9345 can potentially be exploited remotely through malicious DNS packets.