CVE-2017-5596

Priority
Description
In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could
go into an infinite loop, triggered by packet injection or a malformed
capture file. This was addressed in epan/dissectors/packet-asterix.c by
changing a data type to avoid an integer overflow.
Notes
Package
Upstream:released (2.2.4+gcc3dc1b-1)
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was needs-triage)
Ubuntu 14.04 ESM (Trusty Tahr):released ([1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1])
Ubuntu 16.04 LTS (Xenial Xerus):released (2.2.6+g32dac6a-2ubuntu0.16.04)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (2.2.4+gcc3dc1b-1)
More Information

Updated: 2020-01-29 19:59:30 UTC (commit 768ceb2fdee6790d707d0f681e1b54916744af1e)