CVE-2018-7327

2018-02-2322:29:00

Google

osv.dev

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

52.9%

JSON

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an infinite loop that was addressed by validating property lengths.

CPENameOperatorVersion
wiresharkeqwireshark-2.2.10
wiresharkeqwireshark-2.2.6
wiresharkeqwireshark-2.2.0
wiresharkeq2.4.3
wiresharkeq2.2.6
wiresharkeq2.2.11rc0
wiresharkeqwireshark-2.2.11
wiresharkeq2.2.2
wiresharkeq2.2.4rc0
wiresharkeq2.2.7

Name	Operator	Version
wireshark	eq	wireshark-2.2.10
wireshark	eq	wireshark-2.2.6
wireshark	eq	wireshark-2.2.0
wireshark	eq	2.4.3
wireshark	eq	2.2.6
wireshark	eq	2.2.11rc0
wireshark	eq	wireshark-2.2.11
wireshark	eq	2.2.2
wireshark	eq	2.2.4rc0
wireshark	eq	2.2.7