This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2017-9346 →
DEBIAN-CVE-2017-9346
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-s...
Original description
The description as published by the source.
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-slsk.c by making loop bounds more explicit.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
wireshark
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-1"}]}]
Debian:13
wireshark
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-1"}]}]
Debian:14
wireshark
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-1"}]}]
References
- advisory security-tracker.debian.org