Homepage

Resource Management Errors Affecting wireshark package, versions <1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1

Severity

 Recommended
0.0
medium
0
10

Based on Ubuntu security rating.

Threat Intelligence

EPSS
0.3% (70th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1404-WIRESHARK-376389
  • published17 Nov 2016
  • disclosed17 Nov 2016
Report a new vulnerability Found a mistake?

Introduced: 17 Nov 2016

CVE-2016-9376  (opens in a new tab)
CWE-399  (opens in a new tab)

How to fix?

Upgrade Ubuntu:14.04 wireshark to version 1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream wireshark package and not the wireshark package as distributed by Ubuntu. See How to fix? for Ubuntu:14.04 relevant fixed versions and status.

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large.