CVE-2017-9346: High severity Wireshark Wireshark vulnerability
Published Jun 2, 2017
·Updated
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-slsk.c by making loop bounds more explicit.
Affected Software
2 affected components
Wireshark Wireshark>=2.0.0<=2.0.12
Wireshark Wireshark>=2.2.0<=2.2.6
Remediation
Patch Available
Event History
Jun 2, 2017
CVE Published
via MITRE·05:04 AM
Data Sourced
via MITRE·05:04 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9346?
CVE-2017-9346 is categorized as a medium severity vulnerability due to the potential for denial of service through an infinite loop.
2
How do I fix CVE-2017-9346?
To fix CVE-2017-9346, upgrade Wireshark to versions 2.2.7 or later and 2.0.13 or later.
3
What versions of Wireshark are affected by CVE-2017-9346?
CVE-2017-9346 affects Wireshark versions from 2.0.0 to 2.0.12 and 2.2.0 to 2.2.6.
4
What component of Wireshark does CVE-2017-9346 involve?
CVE-2017-9346 involves the SoulSeek dissector in Wireshark.
5
What can happen if I don't address CVE-2017-9346?
If not addressed, CVE-2017-9346 can lead to a denial of service by causing the application to become unresponsive.