5.9
CVSSv3

CVE-2016-4076

Published: 25/04/2016 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x prior to 2.0.3 does not properly initialize memory for search patterns, which allows remote malicious users to cause a denial of service (application crash) via a crafted packet.

Vulnerable Product Search on Vulmon Subscribe to Product

wireshark wireshark 2.0.0

wireshark wireshark 2.0.1

wireshark wireshark 2.0.2

Vendor Advisories

epan/dissectors/packet-ncp2222inc in the NCP dissector in Wireshark 20x before 203 does not properly initialize memory for search patterns, which allows remote attackers to cause a denial of service (application crash) via a crafted packet ...