Wireshark 'profinet/packet-dcerpc-pn-io.c' Denial of Service Vulnerability

Bugtraq ID:	99187
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-9766
Remote:	Yes
Local:	No
Published:	Jun 21 2017 12:00AM
Updated:	Jun 21 2017 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Wireshark Wireshark 2.2.7
Not Vulnerable:

Wireshark 'profinet/packet-dcerpc-pn-io.c' Denial of Service Vulnerability

Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.

Attackers can exploit this issue to crash the affected application, resulting in denial-of-service conditions.

Wireshark 2.2.7 is vulnerable; other versions may also be affected.

Wireshark 'profinet/packet-dcerpc-pn-io.c' Denial of Service Vulnerability

A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.

Wireshark 'profinet/packet-dcerpc-pn-io.c' Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Wireshark 'profinet/packet-dcerpc-pn-io.c' Denial of Service Vulnerability

References:

• PROFINET IO: define an arbitrary recursion depth limit (Wireshark)
  
• Wireshark Homepage (Wireshark)
  
• Bug 13811 - Malformed dcerpc PNIO packet decode, exception handler invalid poio (Wireshark)