| Max CVSS | 7.8 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-6467 | 5.0 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size.
|
03-10-2019 - 00:03 | 04-03-2017 - 03:59 | |
| CVE-2017-6470 | 7.8 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by constraining packet lateness.
|
03-10-2019 - 00:03 | 04-03-2017 - 03:59 | |
| CVE-2017-6014 | 7.8 |
In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attem
|
03-10-2019 - 00:03 | 17-02-2017 - 07:59 | |
| CVE-2017-6472 | 5.0 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence va
|
03-10-2019 - 00:03 | 04-03-2017 - 03:59 | |
| CVE-2017-6474 | 5.0 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes.
|
03-10-2019 - 00:03 | 04-03-2017 - 03:59 | |
| CVE-2017-5596 | 5.0 |
In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid a
|
03-10-2019 - 00:03 | 25-01-2017 - 21:59 | |
| CVE-2017-6468 | 5.0 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records.
|
13-03-2019 - 18:21 | 04-03-2017 - 03:59 | |
| CVE-2017-6473 | 5.0 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets.
|
13-03-2019 - 18:03 | 04-03-2017 - 03:59 | |
| CVE-2017-6471 | 5.0 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length.
|
13-03-2019 - 17:41 | 04-03-2017 - 03:59 | |
| CVE-2017-6469 | 5.0 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-ldss.c by ensuring that memory is allocated for a certain data
|
13-03-2019 - 17:18 | 04-03-2017 - 03:59 | |
| CVE-2017-5597 | 5.0 |
In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an inte
|
04-11-2017 - 01:29 | 25-01-2017 - 21:59 |