PT-2017-11987
CVE-2017-11406
·
Published
2017-07-18
·
Updated
2024-06-15
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.0.0 through 2.0.13
Wireshark versions 2.2.0 through 2.2.7
Description
The issue is related to the DOCSIS dissector in Wireshark, which could enter an infinite loop due to invalid
Frame Control parameter values. This was fixed by rejecting such invalid values in the packet-docsis.c file.Recommendations
For Wireshark versions 2.0.0 through 2.0.13, update to a version where the fix for the DOCSIS dissector has been applied.
For Wireshark versions 2.2.0 through 2.2.7, update to a version where the fix for the DOCSIS dissector has been applied.
Found an issue in the description? Have something to add? Feel free to write us 👾