CVE-2017-9343

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.12 Wireshark versions 2.2.0 through 2.2.6

Description The issue arises from the MSNIP dissector misusing a NULL pointer, which can be exploited. This was resolved by validating an IPv4 address in the epan/dissectors/packet-msnip.c file.

Recommendations For Wireshark versions 2.0.0 through 2.0.12, update to a version where the MSNIP dissector properly validates IPv4 addresses to prevent the misuse of a NULL pointer. For Wireshark versions 2.2.0 through 2.2.6, update to a version where the MSNIP dissector properly validates IPv4 addresses to prevent the misuse of a NULL pointer.