CVE-2017-7701

Published: 12 April 2017

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type.

Priority

CVSS 3 base score: 7.5

Status

Package	Release	Status
wireshark Launchpad, Ubuntu, Debian	Upstream	Released (2.2.6, 2.0.12)



	Ubuntu 18.04 LTS (Bionic Beaver)	Released (2.6.3-1~ubuntu18.04.1)
	Ubuntu 16.04 LTS (Xenial Xerus)	Released (2.6.3-1~ubuntu16.04.1)
	Ubuntu 14.04 ESM (Trusty Tahr)	Released (2.6.3-1~ubuntu14.04.1)

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7701
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13557
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=fa31f69b407436d0946f84baa0acdcc50962bf7a
https://www.wireshark.org/security/wnpa-sec-2017-16.html
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM

CVE-2017-7701

Medium

Status

References

Join the discussion

Canonical is offering Extended Security Maintenance

Further reading