CVE-2017-9352: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop.

Security readout for executives and security teams

CVE-2017-9352 is a Wireshark denial-of-service issue. Certain older Wireshark versions could hang while dissecting Bazaar protocol traffic because the Bazaar dissector could enter an infinite loop. The main business impact is disruption to analysts or systems relying on Wireshark, not evidence of data theft or remote code execution. Exposure is most likely on analyst workstations, packet inspection systems, or forensic environments running affected Wireshark versions and processing Bazaar-related traffic or captures. Treat as a routine remediation item unless affected Wireshark is used in critical monitoring workflows. Prioritize analyst and inspection systems that process untrusted captures. Mitigation focus: Identify any Wireshark 2.2.0-2.2.6 or 2.0.0-2.0.12 installations.; Apply vendor Wireshark updates containing the Bazaar dissector fix.; Restrict use of affected Wireshark builds for untrusted packet captures..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.