vulnerability

Wireshark : CVE-2017-7705 : RPCoRDMA dissector infinite loop

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Apr 12, 2017
Added
Oct 4, 2017
Modified
Nov 27, 2024

Description

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.

Solution(s)

wireshark-upgrade-2_0_12wireshark-upgrade-2_2_6
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.