CVE-2016-5356: Buffer Overflow

Published Aug 7, 2016

Updated

wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.

Affected Software

16 affected components

Wireshark Wireshark=1.12.0

Wireshark Wireshark=1.12.1

Wireshark Wireshark=1.12.2

Wireshark Wireshark=1.12.3

Wireshark Wireshark=1.12.4

Wireshark Wireshark=1.12.5

Wireshark Wireshark=1.12.6

Wireshark Wireshark=1.12.7

Wireshark Wireshark=1.12.8

Wireshark Wireshark=1.12.9

Wireshark Wireshark=1.12.10

Wireshark Wireshark=1.12.11

Wireshark Wireshark=2.0.0

Wireshark Wireshark=2.0.1

Wireshark Wireshark=2.0.2

Wireshark Wireshark=2.0.3

Event History

Aug 7, 2016

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5356?

CVE-2016-5356 is classified as a high severity vulnerability that can lead to a denial of service due to application crash.

How do I fix CVE-2016-5356?

To fix CVE-2016-5356, you should upgrade to Wireshark version 1.12.12 or 2.0.4 or later.

Which versions of Wireshark are affected by CVE-2016-5356?

Wireshark versions 1.12.0 through 1.12.11 and 2.0.0 through 2.0.3 are affected by CVE-2016-5356.

What type of attack does CVE-2016-5356 allow?

CVE-2016-5356 allows remote attackers to execute a denial of service attack that causes the application to crash.

Is there any workaround for CVE-2016-5356 if I cannot update Wireshark?

There are no known workarounds for CVE-2016-5356, so updating to a patched version is the recommended action.