ZeroHour

CVE-2017-6014

CVSS 3.0
7.5 high
EPSS
3%p86
Published
()
Modified
Description

In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory.

Vendors
wiresharkdebian
Products
wireshark, debian linux
Weakness
CWE-835
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.