Wireshark 'epan/dissectors/packet-dcm.c' Denial of Service Vulnerability
BID:98803
Info
Wireshark 'epan/dissectors/packet-dcm.c' Denial of Service Vulnerability
| Bugtraq ID: | 98803 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2017-9349 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 01 2017 12:00AM |
| Updated: | Jun 01 2017 12:00AM |
| Credit: | OSS-Fuzz project. |
| Vulnerable: |
Wireshark Wireshark 2.2.6 Wireshark Wireshark 2.2.5 Wireshark Wireshark 2.2.4 Wireshark Wireshark 2.2.3 Wireshark Wireshark 2.2.2 Wireshark Wireshark 2.2.1 Wireshark Wireshark 2.2 Wireshark Wireshark 2.0.12 Wireshark Wireshark 2.0.11 Wireshark Wireshark 2.0.10 Wireshark Wireshark 2.0.9 Wireshark Wireshark 2.0.8 Wireshark Wireshark 2.0.7 Wireshark Wireshark 2.0.6 Wireshark Wireshark 2.0.5 Wireshark Wireshark 2.0.3 Wireshark Wireshark 2.0.2 Wireshark Wireshark 2.0.4 Wireshark Wireshark 2.0.1 Wireshark Wireshark 2.0.0 Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 |
| Not Vulnerable: |
Wireshark Wireshark 2.2.7 Wireshark Wireshark 2.0.13 |
Discussion
Wireshark 'epan/dissectors/packet-dcm.c' Denial of Service Vulnerability
Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.
Attackers can exploit this issue to cause the application to enter an infinite loop consuming excessive CPU resources which may cause denial-of-service.
Wireshark 2.2.0 through 2.2.6 and 2.0.0 through 2.0.12 are vulnerable.
Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.
Attackers can exploit this issue to cause the application to enter an infinite loop consuming excessive CPU resources which may cause denial-of-service.
Wireshark 2.2.0 through 2.2.6 and 2.0.0 through 2.0.12 are vulnerable.
Exploit / POC
Wireshark 'epan/dissectors/packet-dcm.c' Denial of Service Vulnerability
A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.
A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.
Solution / Fix
Wireshark 'epan/dissectors/packet-dcm.c' Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Wireshark 'epan/dissectors/packet-dcm.c' Denial of Service Vulnerability
References:
References:
- [oss-fuzz] ==20063==AddressSanitizer: hard rss limit exhausted (2048Mb vs 2056Mb (Wireshark)
- packet-dcm.c: Fix infinite loop (Wireshark)
- Wireshark Homepage (Wireshark)
- wnpa-sec-2017-27 · DICOM dissector infinite loop (Wireshark)