CVE-2017-7704
HighSummary
In Wireshark versions 2.2.0 to 2.2.5, the DOF dissector had an issue that could lead to an infinite loop, triggered by packet injection or a malformed capture file. This was addressed by using a different integer data type and adjusting a return value.
Risk Assessment
An infinite loop can cause the application to hang, affecting the availability of the analytical tool. It may also lead to data loss or delays in network traffic analysis.
Recommendation
It is recommended to update Wireshark to version 2.2.6 or later to eliminate this vulnerability and ensure application stability.
Other vulnerabilities in Wireshark DOF dissector
Original NVD description (English source)
In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value.