CVE-2017-9345

HIGH7.5EPSS 1.0%

Published: 6/2/2017Modified: 4/28/2026

Description

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers.

Affected packages (2)

Alpine/wiresharkfrom 0, < 2.2.7-r0
Debian/wiresharkfrom 0, < 2.2.7-1

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2017-9345
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2017-9345