Published: 06/08/2016 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x prior to 1.12.13 does not properly maintain a ptvc data structure, which allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 1.12.4
wireshark wireshark 1.12.10
wireshark wireshark 1.12.5
wireshark wireshark 1.12.0
wireshark wireshark 1.12.9
wireshark wireshark 1.12.2
wireshark wireshark 1.12.1
wireshark wireshark 1.12.7
wireshark wireshark 1.12.11
wireshark wireshark 1.12.6
wireshark wireshark 1.12.3
wireshark wireshark 1.12.12
wireshark wireshark 1.12.8

Multiple vulnerabilities were discovered in the dissectors for NDS, PacketBB, WSP, MMSE, RLC, LDSS, RLC and OpenFlow, which could result in denial of service or the execution of arbitrary code For the stable distribution (jessie), these problems have been fixed in version 1121+g01b65bf-4+deb8u8 For the testing distribution (stretch), these prob ...

Sample generated with AFL Build Information: TShark 1129 (v1129-0-gfadb421 from (HEAD) Copyright 1998-2015 Gerald Combs <gerald@wiresharkorg> and contributors This is free software; see the source for copying conditions There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE Compiled (64-bit) with GLi ...

CWE-476 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12576 http://openwall.com/lists/oss-security/2016/07/28/3 http://www.wireshark.org/security/wnpa-sec-2016-40.html http://www.securitytracker.com/id/1036480 http://www.securityfocus.com/bid/92164 http://www.debian.org/security/2016/dsa-3648 https://www.exploit-db.com/exploits/40194/https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9eacbb4d48df647648127b9258f9e5aeeb0c7d99 https://nvd.nist.gov https://www.debian.org/security/./dsa-3648 https://www.exploit-db.com/exploits/40194/

CVE-2016-6504

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect