CVE-2017-7701: Loop with Unreachable Exit Condition

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type...

CVE-2017-7747: Improper Input Validation

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree...

CVE-2017-7702: Loop with Unreachable Exit Condition

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation...

CVE-2016-7957: Improper Input Validation

In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-btl2cap.c by avoiding use of a seven-byte memcmp for potentially shorter strings...

CVE-2016-7958: Improper Input Validation

In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/CMakeLists.txt by registering this dissector...

PT-2017-17923

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5 Description The SLSK dissector in Wireshark could enter an infinite loop due to packet injection or a malformed capture file. This issue was resolved by adding chec...

PT-2017-17924

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5 Description The issue is related to the PacketBB dissector, which could crash due to packet injection or a malformed capture file. This crash was triggered by...

CVE-2017-7704: Loop with Unreachable Exit Condition

In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value...

CVE-2017-7705: Loop with Unreachable Exit Condition

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset...

PT-2017-17898

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5 Description The WBXML dissector could enter an infinite loop, triggered by packet injection or a malformed capture file. This issue was addressed by adding length...

PT-2017-17897

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5 Description The BGP dissector in Wireshark could enter an infinite loop, triggered by packet injection or a malformed capture file. This issue was addressed by usin...

PT-2017-17900

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.5 Description The issue arises when the DOF dissector in Wireshark enters an infinite loop. This can be triggered by either packet injection or a malformed capture file. The problem was addressed by modifyi...

PT-2017-17899

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5 Description The IMAP dissector could crash due to packet injection or a malformed capture file. This issue was addressed by correctly calculating a line's end in th...

CVE-2017-7748: Loop with Unreachable Exit Condition

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check...

PT-2017-17925

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5 Description The issue arises from the WSP dissector potentially entering an infinite loop. This can be triggered by either packet injection or a malformed capture...

PT-2017-17901

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5 Description The RPC over RDMA dissector could enter an infinite loop, triggered by packet injection or a malformed capture file. This issue was addressed by correct...

PT-2017-17922

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5 Description The SIGCOMP dissector could enter an infinite loop due to packet injection or a malformed capture file. This issue was resolved by correcting a...

CVE-2017-6432

An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port 37777, is an unencrypted, binary protocol. Performing a Man-in-the-Middle attack allows both sniffing and injections of packets, which allows creation of...

PT-2017-17061

Name of the Vulnerable Software and Affected Versions Dahua DHI-HCVR7216A-S3 version 3.210.0001.10 Description An issue was discovered in the Dahua DVR Protocol, which operates on TCP Port 37777. This protocol is unencrypted and binary, allowing for a Man-in-the-Middle attack. Such an attack...

CVE-2017-6471

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length...