Denial of service in Wireshark - CVE-2016-7179
Published: September 13, 2016
Vulnerability identifier: #VU418
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-7179
CWE-ID: CWE-362
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows remote user to cause the denial of service on the target system.
The weakness exists due to causing of the Catapult DCT2000 dissector crash. A remote attacker can send and inject specially crafted malformed packet or trick the victim into reading its trace file.
Successful exploitation of this vulnerability will allow an attacker to cause a denial of service on the vulnerable system.
Affected software
Wireshark
Arch Linux
wireshark (Alpine package)
Arch Linux
wireshark (Alpine package)
How to mitigate CVE-2016-7179
Updade to 2.0.6. or later.
wireshark (Alpine package) - update to 2.0.6-r0