CVE-2017-5597

Published Jan 25, 2017

Last updated a year ago

Overview

Description: In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 3.0

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: CWE-190

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2EF0B55F-A412-48E2-9047-7CCA8442766D"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D8BE013B-8615-49DB-939E-B7E289171467"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FDB30F17-A41A-4F09-977F-AB91E509247E"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D900BA83-D5D3-4A8D-8C32-D135A3E5190E"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A630396B-1D60-4C45-9A45-F15E542B1C1C"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "03EF9BF7-868D-4E3C-978D-B3B5241011B2"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B0F77523-59BD-431A-A790-C3886D337EEA"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "32F65580-D1F4-4ABC-A358-545BF29D8089"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DFFBDC3C-3701-4890-8AA5-AD96EB528F05"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AB13134E-A2E8-46A5-88B2-E2C2C24B6780"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Configurations

References