VDB
CVE-2017-6014
CVE-2017-6014
PUBLISHED
CVSS 7.5 HIGH
In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory.
EPSS 2.94% · 86.6th percentile
Risk Scores
CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
2.94%
86.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | wireshark | 0, 1.12.8+g5b6e543-2, 2.0.1+g59ea380-3build1 |
| Ubuntu:14.04:LTS | wireshark | 0, 1.10.3-1, 1.10.2-1 |
Timeline
- Feb 17, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Mar 2, 2022 EPSS Score
- May 4, 2022 EPSS Score
- Jul 6, 2022 EPSS Score
- Sep 8, 2022 EPSS Score
- Jan 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 16, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2017-6014 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2017-6014 third-party-advisory