CVE-2017-9348

High

Published: 02/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Wireshark versions 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This issue was addressed by validating a size value.

Risk Assessment

Uncontrolled memory reads can lead to unexpected application behavior, posing a risk of data leakage or system crashes.

Recommendation

It is recommended to update Wireshark to the latest version to mitigate this vulnerability.

Other vulnerabilities in Wireshark DOF dissector

CVE-2017-7704High
In Wireshark versions 2.2.0 to 2.2.5, the DOF dissector had an issue that could lead to an infinite loop, triggered by packet injection or a malformed capture file. This was addressed by using a different integer data type and adjusting a return value.

Original NVD description (English source)

In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size value.