CVE-2017-6014
Publication date 17 February 2017
Last updated 24 July 2024
Ubuntu priority
Cvss 3 Severity Score
In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory.
Status
Package | Ubuntu Release | Status |
---|---|---|
wireshark | 18.04 LTS bionic |
Not affected
|
16.04 LTS xenial |
Fixed 2.2.6+g32dac6a-2ubuntu0.16.04
|
|
14.04 LTS trusty |
Fixed 1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1
|
|
Severity score breakdown
Parameter | Value |
---|---|
Base score |
|
Attack vector | Network |
Attack complexity | Low |
Privileges required | None |
User interaction | None |
Scope | Unchanged |
Confidentiality | None |
Integrity impact | None |
Availability impact | High |
Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |