CVE-2017-9766: In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial...

Security readout for executives and security teams

CVE-2017-9766 is a Wireshark denial-of-service issue. A specially crafted PROFINET IO input with excessive recursion can exhaust the stack and crash Wireshark 2.2.7. The main business risk is disruption to analysts or operations teams inspecting untrusted industrial network traffic or packet captures. Exposure is most likely where Wireshark 2.2.7 processes untrusted packet captures or live PROFINET IO traffic, especially in OT or industrial environments. Systems not using Wireshark, or not parsing PROFINET IO data, are less directly exposed. Prioritize routine remediation for teams that inspect industrial traffic. This is not evidenced as actively exploited, but a crash during investigation can disrupt incident response and OT troubleshooting workflows. Mitigation focus: Upgrade Wireshark from 2.2.7 using upstream or distribution security updates.; Apply relevant Debian package updates where Debian Wireshark packages are used.; Avoid opening untrusted PROFINET IO captures on vulnerable analyst workstations..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.