CVE-2017-6014

In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory.
Infinite Loop
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
Affected Products (NVD)
VendorProductVersion
wiresharkwireshark
𝑥
≤ 2.2.4
debiandebian_linux
8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
wireshark
bookworm
4.0.11-1~deb12u1
fixed
bookworm (security)
4.0.11-1~deb12u1
fixed
bullseye
3.4.10-0+deb11u1
fixed
bullseye (security)
3.4.16-0+deb11u1
fixed
sid
4.4.1-1
fixed
trixie
4.4.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wireshark
artful
not-affected
bionic
not-affected
precise
ignored
trusty
Fixed 1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1
released
xenial
Fixed 2.2.6+g32dac6a-2ubuntu0.16.04
released
yakkety
ignored
zesty
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libwireshark8
suse enterprise sap 12 SP1
2.2.6-44.3
fixed
suse enterprise sap 12 SP2
2.2.6-44.3
fixed
suse enterprise server 12 SP1
2.2.6-44.3
fixed
suse enterprise server 12 SP2
2.2.6-44.3
fixed
libwireshark9
suse enterprise sap 12 SP5
2.4.16-48.51.1
fixed
suse enterprise server 12 SP5
2.4.16-48.51.1
fixed
libwiretap6
suse enterprise sap 12 SP1
2.2.6-44.3
fixed
suse enterprise sap 12 SP2
2.2.6-44.3
fixed
suse enterprise server 12 SP1
2.2.6-44.3
fixed
suse enterprise server 12 SP2
2.2.6-44.3
fixed
libwiretap7
suse enterprise sap 12 SP5
2.4.16-48.51.1
fixed
suse enterprise server 12 SP5
2.4.16-48.51.1
fixed
libwscodecs1
suse enterprise sap 12 SP1
2.2.6-44.3
fixed
suse enterprise sap 12 SP2
2.2.6-44.3
fixed
suse enterprise sap 12 SP5
2.4.16-48.51.1
fixed
suse enterprise server 12 SP1
2.2.6-44.3
fixed
suse enterprise server 12 SP2
2.2.6-44.3
fixed
suse enterprise server 12 SP5
2.4.16-48.51.1
fixed
libwsutil7
suse enterprise sap 12 SP1
2.2.6-44.3
fixed
suse enterprise sap 12 SP2
2.2.6-44.3
fixed
suse enterprise server 12 SP1
2.2.6-44.3
fixed
suse enterprise server 12 SP2
2.2.6-44.3
fixed
libwsutil8
suse enterprise sap 12 SP5
2.4.16-48.51.1
fixed
suse enterprise server 12 SP5
2.4.16-48.51.1
fixed
wireshark
suse enterprise sap 12 SP1
2.2.6-44.3
fixed
suse enterprise sap 12 SP2
2.2.6-44.3
fixed
suse enterprise sap 12 SP5
2.4.16-48.51.1
fixed
suse enterprise server 12 SP1
2.2.6-44.3
fixed
suse enterprise server 12 SP2
2.2.6-44.3
fixed
suse enterprise server 12 SP5
2.4.16-48.51.1
fixed
wireshark-gtk
suse enterprise sap 12 SP1
2.2.6-44.3
fixed
suse enterprise sap 12 SP2
2.2.6-44.3
fixed
suse enterprise sap 12 SP5
2.4.16-48.51.1
fixed
suse enterprise server 12 SP1
2.2.6-44.3
fixed
suse enterprise server 12 SP2
2.2.6-44.3
fixed
suse enterprise server 12 SP5
2.4.16-48.51.1
fixed
Common Weakness Enumeration
References
http://www.debian.org/security/2017/dsa-3811
http://www.securityfocus.com/bid/96284
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13416
https://security.gentoo.org/glsa/201706-12
http://www.debian.org/security/2017/dsa-3811
http://www.securityfocus.com/bid/96284
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13416
https://security.gentoo.org/glsa/201706-12