CVE-2016-5355
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2016-5355
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5355.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-5355
- Downstream
- Related
- Published
- 2016-08-07T16:59:09Z
- Modified
- 2025-10-22T17:44:17.237436Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
- References
-
- http://www.debian.org/security/2016/dsa-3615
- https://www.wireshark.org/security/wnpa-sec-2016-34.html
- http://www.openwall.com/lists/oss-security/2016/06/09/3
- https://github.com/wireshark/wireshark/commit/3270dfac43da861c714df76513456b46765ff47f
- https://github.com/wireshark/wireshark/commit/5efb45231671baa2db2011d8f67f9d6e72bc455b
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12394
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- http://www.securityfocus.com/bid/91140
Affected packages
Git / github.com/wireshark/wireshark
Affected ranges
- Type
- GIT
- Repo
- https://github.com/wireshark/wireshark
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
Affected versions
Other
backups/ethereal@18706
ethereal-0-3-15
start
ethereal-0.*
ethereal-0.3.15
v1.*
v1.11.0
v1.11.0-rc1
v1.11.1
v1.11.1-rc1
v1.11.2
v1.11.2-rc1
v1.11.3
v1.11.3-rc1
v1.11.4-rc1
v1.99.0
v1.99.0-rc1
v1.99.1
v1.99.10rc0
v1.99.1rc0
v1.99.2
v1.99.2rc0
v1.99.3
v1.99.3rc0
v1.99.4
v1.99.4rc0
v1.99.5
v1.99.5rc0
v1.99.6
v1.99.6rc0
v1.99.7
v1.99.7rc0
v1.99.8
v1.99.8rc0
v1.99.9
v1.99.9rc0
v2.*
v2.1.0rc0
wireshark-1.*
wireshark-1.11.3
wireshark-1.99.0
wireshark-1.99.1
wireshark-1.99.2
wireshark-1.99.3
wireshark-1.99.4
wireshark-1.99.5
wireshark-1.99.6
wireshark-1.99.7
wireshark-1.99.8
wireshark-1.99.9
Database specific
vanir_signatures
[
{
"source": "https://github.com/wireshark/wireshark/commit/5efb45231671baa2db2011d8f67f9d6e72bc455b",
"target": {
"file": "wiretap/toshiba.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"222472030124558903662423588367175922458",
"195759074594662894182382324617615830295",
"283796853935284558832892467406390596183",
"109201914752022300569507316507146393595",
"277084973135359600370079367470878906833",
"208459913058928882533967903486234800560",
"288380669237646100572132430427755402934",
"71371983581895935206773910982285805940",
"5686293301648776978992919168810849288",
"336895237281205011077460297476857256315",
"228950723378601078918892079557320994569",
"87081937081611371651809983671600852229",
"157000304485411451266701731849443473487",
"172667033939294234761467952164003678289",
"105236842549951244178939431531586891643",
"43820112650451027626426710000672187177",
"326752506863499794459234409193910882951",
"36041466847695983854234170705769995075",
"68552537321264856197070472797328510024",
"75783356510037799163678349351110837102"
],
"threshold": 0.9
},
"id": "CVE-2016-5355-430bec25"
},
{
"source": "https://github.com/wireshark/wireshark/commit/5efb45231671baa2db2011d8f67f9d6e72bc455b",
"target": {
"function": "parse_toshiba_packet",
"file": "wiretap/toshiba.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "45551249823097417350531750011362455708",
"length": 2293.0
},
"id": "CVE-2016-5355-a6150e54"
}
]