CVE-2017-15189

High

Published: 10/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Wireshark versions 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was addressed by adding decrements in plugins/docsis/packet-docsis.c.

Risk Assessment

An infinite loop could lead to application hang, affecting the availability of the analytical tool. This may hinder network traffic analysis during critical moments.

Recommendation

It is recommended to update Wireshark to version 2.4.2 or later to mitigate this vulnerability.

Other vulnerabilities in Wireshark DOCSIS dissector

CVE-2017-11406High
In Wireshark versions 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed by rejecting invalid Frame Control parameter values.

Original NVD description (English source)

In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by adding decrements.