High severity7.5NVD Advisory· Published Mar 4, 2017· Updated Jun 17, 2026

CVE-2017-6470

Description

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by constraining packet lateness.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wireshark/Wireshark
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
Range: >=2.0.0,<=2.0.10
Debian/linux
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
osv-coords
pkg:rpm/opensuse/wireshark&distro=openSUSE%20Tumbleweed
Range: < 3.4.8-1.2

Patches

Vulnerability mechanics

References

bugs.wireshark.org/bugzilla/show_bug.cginvdIssue TrackingPatchVendor Advisory
www.debian.org/security/2017/dsa-3811nvdThird Party Advisory
www.securityfocus.com/bid/96563nvdThird Party AdvisoryVDB Entry
www.wireshark.org/security/wnpa-sec-2017-10.htmlnvdVendor Advisory
code.wireshark.org/review/gitwebnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000