CVE-2017-5596

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.9 Wireshark versions 2.2.0 through 2.2.3

Description The issue arises from the ASTERIX dissector, which can enter an infinite loop due to packet injection or a malformed capture file, potentially caused by an integer overflow.

Recommendations For Wireshark versions 2.0.0 through 2.0.9, update to a version where the issue is fixed by changing the data type in epan/dissectors/packet-asterix.c to avoid the integer overflow. For Wireshark versions 2.2.0 through 2.2.3, update to a version where the issue is fixed by changing the data type in epan/dissectors/packet-asterix.c to avoid the integer overflow.