CVE-2017-11406

High

Published: 18/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Wireshark versions 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed by rejecting invalid Frame Control parameter values.

Risk Assessment

An infinite loop in the dissector may lead to application hang, affecting the availability of the analytical tool. This can hinder network traffic analysis in critical situations.

Recommendation

It is recommended to update Wireshark to the latest version to mitigate this vulnerability and ensure application stability.

Other vulnerabilities in Wireshark DOCSIS dissector

CVE-2017-15189High
In Wireshark versions 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was addressed by adding decrements in plugins/docsis/packet-docsis.c.

Original NVD description (English source)

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values.