In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with dissection after encountering an unexpected type.
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wireshark | Wireshark | 2.2.0 (including) | 2.2.12 (including) |
| Wireshark | Wireshark | 2.4.0 (including) | 2.4.4 (including) |
| Wireshark | Ubuntu | artful | * |
| Wireshark | Ubuntu | bionic | * |
| Wireshark | Ubuntu | trusty | * |
| Wireshark | Ubuntu | upstream | * |
| Wireshark | Ubuntu | xenial | * |