CVE-2017-9617: Wireshark

Medium severity, CVSS 5.5. EPSS: 1.1% chance of exploitation in the next 30 days.

In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in epan/dissectors/packet-daap.c in the DAAP dissector.

Affected products

• Wireshark Wireshark: version 2.2.7 only

Published 2017-06-14. Last modified 2026-06-17.