CVE-2016-9374: Buffer Overflow
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9374?
CVE-2016-9374 is considered a moderate severity vulnerability due to the potential for denial of service through a crash.
How do I fix CVE-2016-9374?
To fix CVE-2016-9374, update Wireshark to version 2.2.2 or later, or any version above 2.0.7.
Which versions of Wireshark are affected by CVE-2016-9374?
CVE-2016-9374 affects Wireshark versions 2.0.0 to 2.0.7 and 2.2.0 to 2.2.1.
What type of vulnerability is CVE-2016-9374?
CVE-2016-9374 is classified as a buffer over-read vulnerability in the AllJoyn dissector.
Is there a specific environment where CVE-2016-9374 can be exploited?
CVE-2016-9374 can be triggered by malicious network traffic or specially crafted capture files.