Description
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths.
References (7)
Scores
CVSS v3
7.5
EPSS
0.0134
EPSS Percentile
80.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-834
Status
published
Products (2)
debian/debian_linux
8.0
wireshark/wireshark
2.2.0 - 2.2.15
Published
Jul 19, 2018
Tracked Since
Feb 18, 2026