CVE Vulnerabilities

CVE-2016-5350

Published: Aug 07, 2016 | Modified: Nov 28, 2016
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
4.3 MODERATE
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
MEDIUM

epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

Affected Software

Name Vendor Start Version End Version
Wireshark Wireshark 1.12.0 (including) 1.12.0 (including)
Wireshark Wireshark 1.12.1 (including) 1.12.1 (including)
Wireshark Wireshark 1.12.2 (including) 1.12.2 (including)
Wireshark Wireshark 1.12.3 (including) 1.12.3 (including)
Wireshark Wireshark 1.12.4 (including) 1.12.4 (including)
Wireshark Wireshark 1.12.5 (including) 1.12.5 (including)
Wireshark Wireshark 1.12.6 (including) 1.12.6 (including)
Wireshark Wireshark 1.12.7 (including) 1.12.7 (including)
Wireshark Wireshark 1.12.8 (including) 1.12.8 (including)
Wireshark Wireshark 1.12.9 (including) 1.12.9 (including)
Wireshark Wireshark 1.12.10 (including) 1.12.10 (including)
Wireshark Wireshark 1.12.11 (including) 1.12.11 (including)
Wireshark Wireshark 2.0.0 (including) 2.0.0 (including)
Wireshark Wireshark 2.0.1 (including) 2.0.1 (including)
Wireshark Wireshark 2.0.2 (including) 2.0.2 (including)
Wireshark Wireshark 2.0.3 (including) 2.0.3 (including)
Wireshark Ubuntu precise *
Wireshark Ubuntu trusty *
Wireshark Ubuntu upstream *
Wireshark Ubuntu wily *
Wireshark Ubuntu xenial *
Wireshark Ubuntu yakkety *
Wireshark Ubuntu zesty *

References