Infinite loop in Wireshark - CVE-2017-6014

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU33263

Infinite loop in Wireshark - CVE-2017-6014

Published: February 17, 2017 / Updated: August 3, 2020


Vulnerability identifier: #VU33263
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-6014
CWE-ID: CWE-835
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory.


Affected software

Wireshark
Gentoo Linux
Fedora
wireshark (Alpine package)
collectd (Alpine package)
wireshark

How to mitigate CVE-2017-6014

Install update from vendor's website.

Wireshark - update to 2.2.5
wireshark (Alpine package) - update to 2.2.4-r1
wireshark - addressed in versions 2.2.6-1.fc25, 2.4.5-1.fc27, 2.4.5-1.fc28, 2.4.5-2.fc27, 2.4.5-2.fc28, 2.4.5-3.fc27, 2.4.5-3.fc28

External References

Related Security Bulletins