CVE-2017-7705

HIGH7.5EPSS 0.53%

Published: 4/12/2017Modified: 4/28/2026

Description

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.

Affected packages (2)

Alpine/wiresharkfrom 0, < 2.2.6-r0
Debian/wiresharkfrom 0, < 2.2.6+g32dac6a-1

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2017-7705
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2017-7705