CVE-2016-4078
The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted packet, related…
Does this matter?
Lower severity and a low EPSS score (2.12%). Track it; it rarely justifies an emergency change on its own.
Description
The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted packet, related to epan/dissectors/packet-capwap.c and epan/dissectors/packet-ieee80211.c.
- CVSS 3.0
- 5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 2.12% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- wireshark/wireshark
- Source
- cve@mitre.org
References
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- http://www.securitytracker.com/id/1035685
- http://www.wireshark.org/security/wnpa-sec-2016-21.htmlVendor Advisory
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11824
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12187
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e2745d741ec11f395d41c0aafa24df9dec136399
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- http://www.securitytracker.com/id/1035685
- http://www.wireshark.org/security/wnpa-sec-2016-21.htmlVendor Advisory
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11824
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12187
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e2745d741ec11f395d41c0aafa24df9dec136399
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.