CVE-2016-5350: High severity wireshark vulnerability
Published Aug 7, 2016
·Updated
epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
Affected Software
16 affected components
Wireshark Wireshark=1.12.0
Wireshark Wireshark=1.12.1
Wireshark Wireshark=1.12.2
Wireshark Wireshark=1.12.3
Wireshark Wireshark=1.12.4
Wireshark Wireshark=1.12.5
Wireshark Wireshark=1.12.6
Wireshark Wireshark=1.12.7
Wireshark Wireshark=1.12.8
Wireshark Wireshark=1.12.9
Wireshark Wireshark=1.12.10
Wireshark Wireshark=1.12.11
Wireshark Wireshark=2.0.0
Wireshark Wireshark=2.0.1
Wireshark Wireshark=2.0.2
Wireshark Wireshark=2.0.3
Remediation
Event History
Aug 7, 2016
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-5350?
The severity of CVE-2016-5350 is classified as a denial of service vulnerability.
2
How do I fix CVE-2016-5350?
To fix CVE-2016-5350, upgrade Wireshark to version 1.12.12 or 2.0.4 or later.
3
What versions are affected by CVE-2016-5350?
CVE-2016-5350 affects Wireshark versions 1.12.0 to 1.12.11 and 2.0.0 to 2.0.3.
4
Can CVE-2016-5350 lead to data leakage?
CVE-2016-5350 does not lead to data leakage, but it can cause an infinite loop resulting in a denial of service.
5
Is CVE-2016-5350 exploit-related to network traffic?
Yes, CVE-2016-5350 can be exploited through crafted packets sent over the network.