{"id":"CVE-2016-7179","aliases":["DEBIAN-CVE-2016-7179","DLA-632-1","DSA-3671-1","EUVD-2016-8047","GHSA-mw3q-2xf6-36xq","MGASA-2016-0321","SUSE-SU-2017:1174-1","SUSE-SU-2017:1442-1","UBUNTU-CVE-2016-7179","openSUSE-SU-2024:10199-1"],"status":"published","title":"Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000...","description":"Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02652,"percentile":0.85749,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2016-09-09T10:00:00Z","modified":"2026-10-24T10:30:28Z","fixes":[{"ecosystem":"Debian:12","package":"wireshark","fixed_in":["2.2.0~rc1+g438c022-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["2.2.0~rc1+g438c022-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["2.2.0~rc1+g438c022-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"wireshark","fixed_in":["1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"wireshark","fixed_in":["2.2.6+g32dac6a-2ubuntu0.16.04"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0~rc1+g438c022-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0~rc1+g438c022-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0~rc1+g438c022-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1+g01b65bf-4+deb8u6~deb7u4"}]}],"versions":["1.10.0-1","1.10.0-2","1.10.0-2~bpo70+1","1.10.0~rc1-1","1.10.0~rc2-1","1.10.1-1","1.10.1-1~bpo70+1","1.10.2-1","1.10.2-1~bpo70+1","1.10.2-2","1.10.3-1","1.10.3-1~bpo70+1","1.10.4-1","1.10.5-1","1.10.5-1~bpo70+1","1.10.5-2","1.10.6-1","1.10.6-1~bpo70+1","1.10.7-1","1.10.7-1~bpo70+1","1.10.7-2","1.10.7-3","1.10.7-4","1.10.8-1","1.10.8-1~bpo70+1","1.12.0+git+4fab41a1-1","1.12.0~rc1-1","1.12.0~rc1-2","1.12.0~rc2+git+fd017ee+dfsg1-1","1.12.0~rc3+git+e14d5b6eaa+dfsg1-1","1.12.1+g01b65bf-1","1.12.1+g01b65bf-1~bpo70+1","1.12.1+g01b65bf-2","1.12.1+g01b65bf-2~bpo70+1","1.12.1+g01b65bf-3","1.12.1+g01b65bf-4","1.12.1+g01b65bf-4~bpo70+1","1.8.2-5wheezy10","1.8.2-5wheezy11","1.8.2-5wheezy12","1.8.2-5wheezy13","1.8.2-5wheezy14","1.8.2-5wheezy15","1.8.2-5wheezy15~deb6u1","1.8.2-5wheezy16","1.8.2-5wheezy16~deb6u1","1.8.2-5wheezy17","1.8.2-5wheezy18","1.8.2-5wheezy2","1.8.2-5wheezy3","1.8.2-5wheezy4","1.8.2-5wheezy5","1.8.2-5wheezy6","1.8.2-5wheezy7","1.8.2-5wheezy8","1.8.2-5wheezy9","1.8.6-1","1.8.6-2","1.8.6-3","1.8.7-1","1.9.1-1","1.9.1-2","1.9.2-1"],"bundled":5},{"source":"osv","ecosystem":"Debian:8","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1+g01b65bf-4+deb8u9"}]}],"versions":["1.12.1+g01b65bf-4","1.12.1+g01b65bf-4+deb8u1","1.12.1+g01b65bf-4+deb8u2","1.12.1+g01b65bf-4+deb8u3","1.12.1+g01b65bf-4+deb8u4","1.12.1+g01b65bf-4+deb8u5","1.12.1+g01b65bf-4+deb8u6","1.12.1+g01b65bf-4+deb8u6~deb7u1","1.12.1+g01b65bf-4+deb8u6~deb7u10","1.12.1+g01b65bf-4+deb8u6~deb7u11","1.12.1+g01b65bf-4+deb8u6~deb7u2","1.12.1+g01b65bf-4+deb8u6~deb7u3","1.12.1+g01b65bf-4+deb8u6~deb7u4","1.12.1+g01b65bf-4+deb8u6~deb7u5","1.12.1+g01b65bf-4+deb8u6~deb7u6","1.12.1+g01b65bf-4+deb8u6~deb7u7","1.12.1+g01b65bf-4+deb8u6~deb7u8","1.12.1+g01b65bf-4+deb8u6~deb7u9","1.12.1+g01b65bf-4+deb8u7","1.12.1+g01b65bf-4+deb8u8"],"bundled":5},{"source":"osv","ecosystem":"Mageia:5","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.12-36.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.12-36.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.12-36.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-44.3"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-44.3"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-44.3"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-44.3"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-44.3"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-44.3"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-44.3"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-44.3"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-44.3"}]}],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"}]}],"versions":["1.10.2-1","1.10.3-1","1.10.5-1ubuntu1","1.10.5-2","1.10.6-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6+g32dac6a-2ubuntu0.16.04"}]}],"versions":["1.12.7+g7fc8978-1","1.12.8+g5b6e543-2","2.0.1+g59ea380-3build1","2.0.2+ga16e22e-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-1.1"}]}],"bundled":262}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"wireshark","product":"wireshark"}],"references":[{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12752","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-54.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"http://www.securitytracker.com/id/1036760","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3671","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b97fbddc23c065727b0147aab52a27c4aadffe7","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://code.wireshark.org/review/17095","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7179"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b97fbddc23c065727b0147aab52a27c4aadffe7"},{"url":"https://github.com/advisories/GHSA-mw3q-2xf6-36xq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-7179","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0321.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19442","tags":["report"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-50.html","tags":["web"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-51.html","tags":["web"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-52.html","tags":["web"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-53.html","tags":["web"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2016-55.html","tags":["web"]},{"url":"https://www.wireshark.org/docs/relnotes/wireshark-2.0.6.html","tags":["web"]},{"url":"https://www.wireshark.org/news/20160908.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171174-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1002981","tags":["report"]},{"url":"https://bugzilla.suse.com/1010735","tags":["report"]},{"url":"https://bugzilla.suse.com/1010740","tags":["report"]},{"url":"https://bugzilla.suse.com/1010752","tags":["report"]},{"url":"https://bugzilla.suse.com/1010754","tags":["report"]},{"url":"https://bugzilla.suse.com/1010911","tags":["report"]},{"url":"https://bugzilla.suse.com/1021739","tags":["report"]},{"url":"https://bugzilla.suse.com/1025913","tags":["report"]},{"url":"https://bugzilla.suse.com/1027998","tags":["report"]},{"url":"https://bugzilla.suse.com/1033936","tags":["report"]},{"url":"https://bugzilla.suse.com/1033937","tags":["report"]},{"url":"https://bugzilla.suse.com/1033938","tags":["report"]},{"url":"https://bugzilla.suse.com/1033939","tags":["report"]},{"url":"https://bugzilla.suse.com/1033940","tags":["report"]},{"url":"https://bugzilla.suse.com/1033941","tags":["report"]},{"url":"https://bugzilla.suse.com/1033942","tags":["report"]},{"url":"https://bugzilla.suse.com/1033943","tags":["report"]},{"url":"https://bugzilla.suse.com/1033944","tags":["report"]},{"url":"https://bugzilla.suse.com/1033945","tags":["report"]},{"url":"https://bugzilla.suse.com/998761","tags":["report"]},{"url":"https://bugzilla.suse.com/998762","tags":["report"]},{"url":"https://bugzilla.suse.com/998763","tags":["report"]},{"url":"https://bugzilla.suse.com/998800","tags":["report"]},{"url":"https://bugzilla.suse.com/998963","tags":["report"]},{"url":"https://bugzilla.suse.com/998964","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7748","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171442-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1026507","tags":["report"]},{"url":"https://bugzilla.suse.com/1027692","tags":["report"]},{"url":"https://bugzilla.suse.com/990856","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6354","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-7179","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7179","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9372","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-7179","description":"Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2016-09-09T10:00:00Z","modified":"2024-08-06T01:50:47.52Z","updated_at":"2026-11-02T14:33:36.483151Z"}],"euvd":[{"id":"EUVD-2016-8047","description":"Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2016-09-09T10:00:00Z","modified":"2024-08-06T01:50:47Z","updated_at":"2026-11-03T02:22:34.032839Z"}],"ghsa":[{"id":"GHSA-mw3q-2xf6-36xq","title":"Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000...","description":"Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2022-05-17T03:48:21Z","modified":"2025-04-12T13:04:57Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:29.780856Z"}],"nvd":[{"id":"CVE-2016-7179","description":"Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2016-09-09T10:59:05.307Z","modified":"2026-06-17T00:52:44.573Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:29.893676Z"}],"osv":[{"id":"CVE-2016-7179","description":"Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2016-09-09T10:59:05.307Z","modified":"2026-10-24T10:30:28.08805547Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:02.776224Z"},{"id":"DEBIAN-CVE-2016-7179","description":"Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2016-09-09T10:59:05.307Z","modified":"2026-09-22T07:03:11.299535047Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:27.910042Z"},{"id":"UBUNTU-CVE-2016-7179","description":"Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2016-09-09T10:59:00Z","modified":"2026-04-22T10:56:58.119049Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:12.994319Z"},{"id":"DLA-632-1","title":"wireshark - security update","status":"published","published":"2016-09-21T00:00:00Z","modified":"2026-03-09T02:10:16.273464Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3671-1","title":"wireshark - security update","status":"published","published":"2016-09-20T00:00:00Z","modified":"2026-03-09T01:20:21.030863Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2016-0321","title":"Updated wireshark packages fix security vulnerabilities","description":"The wireshark package has been updated to version 2.0.6, which fixes several\nsecurity issues where a malformed packet trace could cause it to crash, and\nfixes several other bugs as well.  See the release notes for details.\n","status":"published","published":"2016-09-25T15:45:31Z","modified":"2026-04-16T06:24:42.074208157Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10199-1","title":"wireshark-2.2.2-1.1 on GA media","description":"These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:19:54.396452Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2017:1174-1","title":"Security update for wireshark","description":"\nWireshark was updated to version 2.0.12, which brings several new features, enhancements\nand bug fixes.\n\nThese security issues were fixed:\n\n- CVE-2017-7700: In Wireshark the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size (bsc#1033936).\n- CVE-2017-7701: In Wireshark the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type (bsc#1033937).\n- CVE-2017-7702: In Wireshark the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation (bsc#1033938).\n- CVE-2017-7703: In Wireshark the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly (bsc#1033939).\n- CVE-2017-7704: In Wireshark the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value (bsc#1033940).\n- CVE-2017-7705: In Wireshark the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset (bsc#1033941).\n- CVE-2017-7745: In Wireshark the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check (bsc#1033942).\n- CVE-2017-7746: In Wireshark the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length (bsc#1033943).\n- CVE-2017-7747: In Wireshark the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree (bsc#1033944).\n- CVE-2017-7748: In Wireshark the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check (bsc#1033945).\n- CVE-2016-7179: Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark allowed remote attackers to cause a denial of service (application crash) via a crafted packet (bsc#998963).\n- CVE-2016-9376: In Wireshark the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large (bsc#1010735).\n- CVE-2016-9375: In Wireshark the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful (bsc#1010740).\n- CVE-2016-9374: In Wireshark the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable (bsc#1010752).\n- CVE-2016-9373: In Wireshark the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings (bsc#1010754).\n- CVE-2016-7175: epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark mishandled MAC address data, which allowed remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet (bsc#998761).\n- CVE-2016-7176: epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark called snprintf with one of its input buffers as the output buffer, which allowed remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet (bsc#998762).\n- CVE-2016-7177: epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark did not restrict the number of channels, which allowed remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet (bsc#998763).\n- CVE-2016-7180: epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark did not properly consider whether a string is constant, which allowed remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet (bsc#998800).\n- CVE-2016-7178: epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark did not ensure that memory is allocated for certain data structures, which allowed remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet (bsc#998964).\n- CVE-2017-6014: In Wireshark a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory (bsc#1025913).\n- CVE-2017-5596: In Wireshark the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow (bsc#1021739).\n- CVE-2017-5597: In Wireshark the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow (bsc#1021739).\n","status":"published","published":"2017-05-04T10:03:13Z","modified":"2026-02-04T03:40:48.185799Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1442-1","title":"Security update for wireshark","description":"\nWireshark was updated to version 2.2.6, which brings several new features, enhancements\nand bug fixes.\n\nThses security issues were fixed:\n\n- CVE-2017-7700: In Wireshark the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size (bsc#1033936)\n- CVE-2017-7701: In Wireshark the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type (bsc#1033937)\n- CVE-2017-7702: In Wireshark the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation (bsc#1033938)\n- CVE-2017-7703: In Wireshark the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly (bsc#1033939)\n- CVE-2017-7704: In Wireshark the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value (bsc#1033940)\n- CVE-2017-7705: In Wireshark the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset (bsc#1033941)\n- CVE-2017-7745: In Wireshark the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check (bsc#1033942)\n- CVE-2017-7746: In Wireshark the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length (bsc#1033943)\n- CVE-2017-7747: In Wireshark the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree (bsc#1033944)\n- CVE-2017-7748: In Wireshark the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check (bsc#1033945)\n- CVE-2017-6014: In Wireshark a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero length packet. This will quickly exhaust all system memory (bsc#1025913)\n- CVE-2017-5596: In Wireshark the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow (bsc#1021739)\n- CVE-2017-5597: In Wireshark the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow (bsc#1021739)\n- CVE-2016-9376: In Wireshark the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large (bsc#1010735)\n- CVE-2016-9375: In Wireshark the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful (bsc#1010740)\n- CVE-2016-9374: In Wireshark the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable (bsc#1010752)\n- CVE-2016-9373: In Wireshark the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings (bsc#1010754)\n- CVE-2016-7180: epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark did not properly consider whether a string is constant, which allowed remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet (bsc#998800)\n- CVE-2016-7179: Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark allowed remote attackers to cause a denial of service (application crash) via a crafted packet (bsc#998963)\n- CVE-2016-7178: epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark did not ensure that memory is allocated for certain data structures, which allowed remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet (bsc#998964)\n- CVE-2016-7177: epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark did not restrict the number of channels, which allowed remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet (bsc#998763)\n- CVE-2016-7176: epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark called snprintf with one of its input buffers as the output buffer, which allowed remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet (bsc#998762)\n- CVE-2016-7175: epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark mishandled MAC address data, which allowed remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet (bsc#998761)\n- CVE-2016-6354: Heap-based buffer overflow in the yy_get_next_buffer function in Flex might have allowed context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read (bsc#990856).\n","status":"published","published":"2017-05-30T11:22:49Z","modified":"2026-02-04T04:33:08.873397Z","updated_at":"2026-11-02T15:53:43.83457Z"}]}}