CVE-2017-7746

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5

Description The SLSK dissector in Wireshark could enter an infinite loop due to packet injection or a malformed capture file. This issue was resolved by adding checks for the remaining length in the epan/dissectors/packet-slsk.c file.

Recommendations For Wireshark versions 2.0.0 through 2.0.11, update to a version where the issue is fixed by adding checks for the remaining length in the dissector. For Wireshark versions 2.2.0 through 2.2.5, update to a version where the issue is fixed by adding checks for the remaining length in the dissector.