CVE-2017-7705

7.5 HIGH
Published: April 12, 2017 Modified: May 13, 2026
View on NVD

Description

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://www.securityfocus.com/bid/97630
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038262
Source: cve@mitre.org
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13558
Source: cve@mitre.org
Issue Tracking Patch
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=08d392bbecc8fb666bf979e70a34536007b83ea2
Source: cve@mitre.org
https://security.gentoo.org/glsa/201706-12
Source: cve@mitre.org
https://www.wireshark.org/security/wnpa-sec-2017-15.html
Source: cve@mitre.org
Vendor Advisory
http://www.securityfocus.com/bid/97630
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038262
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13558
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking Patch
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=08d392bbecc8fb666bf979e70a34536007b83ea2
Source: af854a3a-2127-422b-91ae-364da2661108
https://security.gentoo.org/glsa/201706-12
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.wireshark.org/security/wnpa-sec-2017-15.html
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

12 reference(s) from NVD

Quick Stats

CVSS v3 Score
7.5 / 10.0
EPSS (Exploit Probability)
2.7%
84th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-835

Affected Vendors

wireshark

Related CVEs

CVE-2026-9677 N/A
CVE-2026-13245 6.1
CVE-2026-12404 5.3
CVE-2026-10820 N/A
CVE-2026-12415 9.8