CVE-2016-5350

ALTO 7.5CVE-2016-5350 · Published 07/08/2016 · updated 17/06/2026

Em resumo

CVE-2016-5350 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta wireshark (wireshark).
Chance de exploração nos próximos 30 dias (EPSS): 2.8%, maior que 86.3% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
wireshark wireshark	`= 1.12.0= 1.12.1= 1.12.10= 1.12.11= 1.12.2= 1.12.3= 1.12.4= 1.12.5= 1.12.6= 1.12.7= 1.12.8= 1.12.9= 2.0.0= 2.0.1= 2.0.2= 2.0.3`	No fix yet

Description

epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

References

debian.org/security/2016/dsa-3615
openwall.com/lists/oss-security/2016/06/09/3 · Release Notes
oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
securityfocus.com/bid/91140
wireshark/wireshark commit b4d16b4 · Patch
wireshark.org/security/wnpa-sec-2016-29.html · Vendor Advisory

Mais vulnerabilidades de wireshark

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wireshark

= 1.12.0= 1.12.1= 1.12.10= 1.12.11= 1.12.2= 1.12.3= 1.12.4= 1.12.5= 1.12.6= 1.12.7= 1.12.8= 1.12.9= 2.0.0= 2.0.1= 2.0.2= 2.0.3

No fix yet

Mais vulnerabilidades de wireshark

Ver tudo →