wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
[
{
"source": "https://github.com/wireshark/wireshark/commit/5efb45231671baa2db2011d8f67f9d6e72bc455b",
"target": {
"file": "wiretap/toshiba.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"222472030124558903662423588367175922458",
"195759074594662894182382324617615830295",
"283796853935284558832892467406390596183",
"109201914752022300569507316507146393595",
"277084973135359600370079367470878906833",
"208459913058928882533967903486234800560",
"288380669237646100572132430427755402934",
"71371983581895935206773910982285805940",
"5686293301648776978992919168810849288",
"336895237281205011077460297476857256315",
"228950723378601078918892079557320994569",
"87081937081611371651809983671600852229",
"157000304485411451266701731849443473487",
"172667033939294234761467952164003678289",
"105236842549951244178939431531586891643",
"43820112650451027626426710000672187177",
"326752506863499794459234409193910882951",
"36041466847695983854234170705769995075",
"68552537321264856197070472797328510024",
"75783356510037799163678349351110837102"
],
"threshold": 0.9
},
"id": "CVE-2016-5355-430bec25"
},
{
"source": "https://github.com/wireshark/wireshark/commit/5efb45231671baa2db2011d8f67f9d6e72bc455b",
"target": {
"function": "parse_toshiba_packet",
"file": "wiretap/toshiba.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "45551249823097417350531750011362455708",
"length": 2293.0
},
"id": "CVE-2016-5355-a6150e54"
}
]