CVE-2017-9766: High severity wireshark vulnerability
In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (stack exhaustion) in the dissectIODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9766?
CVE-2017-9766 has a severity rating that indicates a potential denial of service due to stack exhaustion in Wireshark.
How do I fix CVE-2017-9766?
To fix CVE-2017-9766, update Wireshark to the latest version that addresses the vulnerability, specifically beyond version 2.2.7.
What is the impact of CVE-2017-9766 on affected systems?
The impact of CVE-2017-9766 on affected systems includes the possibility of remote denial of service attacks that can cause application crashes.
Which versions of Wireshark are affected by CVE-2017-9766?
CVE-2017-9766 specifically affects Wireshark version 2.2.7.
Is CVE-2017-9766 exploitable over the network?
Yes, CVE-2017-9766 can be exploited remotely, allowing attackers to affect system stability.