NVD

Id
20635  
Name
CVE-2016-5350  
Description
epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-08-07  
Modified Date
2016-11-28  
Seq
2016-5350  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112927 20635 CVE-2016-5350 DSA-3615  View
112928 20635 CVE-2016-5350 [oss-security] 20160609 Re: CVE Request: wireshark releases  View
112929 20635 CVE-2016-5350 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
112930 20635 CVE-2016-5350 91140  View
112931 20635 CVE-2016-5350 https://github.com/wireshark/wireshark/commit/b4d16b4495b732888e12baf5b8a7e9bf2665e22b  View
112932 20635 CVE-2016-5350 https://www.wireshark.org/security/wnpa-sec-2016-29.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3545 JVNDB-2016-004318 Wireshark の SPOOLS コンポーネントの epan/dissectors/packet-dcerpc-spoolss.c におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の SPOOLS コンポーネントの epan/dissectors/packet-dcerpc-spoolss.c は、予期しないオフセットを誤って処理するため、サービス運用妨害 (無限ループ) 状態にされる脆弱性が存在します。 CVE-2016-5350 91856 CVE-2016-5350 20635 4.3 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004318.html 2016-06-07 2016-11-16 View