In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (stack exhaustion) in the dissect_IODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wireshark | Wireshark | 2.2.7 (including) | 2.2.7 (including) |
| Wireshark | Ubuntu | artful | * |
| Wireshark | Ubuntu | bionic | * |
| Wireshark | Ubuntu | trusty | * |
| Wireshark | Ubuntu | upstream | * |
| Wireshark | Ubuntu | xenial | * |
| Wireshark | Ubuntu | yakkety | * |
| Wireshark | Ubuntu | zesty | * |