CVE-2016-5358
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2016-5358
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5358.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-5358
- Downstream
- Related
- Published
- 2016-08-07T16:59:13Z
- Modified
- 2025-10-24T03:51:45.725490Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- References
-
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- https://www.wireshark.org/security/wnpa-sec-2016-37.html
- http://www.openwall.com/lists/oss-security/2016/06/09/3
- https://github.com/wireshark/wireshark/commit/2c13e97d656c1c0ac4d76eb9d307664aae0e0cf7
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12440
- http://www.securityfocus.com/bid/91140
Affected packages
Git / github.com/wireshark/wireshark
Affected ranges
- Type
- GIT
- Repo
- https://github.com/wireshark/wireshark
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
Other
backups/ethereal@18706
ethereal-0-3-15
start
ethereal-0.*
ethereal-0.3.15
v1.*
v1.11.0
v1.11.0-rc1
v1.11.1
v1.11.1-rc1
v1.11.2
v1.11.2-rc1
v1.11.3
v1.11.3-rc1
v1.11.4-rc1
v1.99.0
v1.99.0-rc1
v1.99.1
v1.99.10rc0
v1.99.1rc0
v1.99.2
v1.99.2rc0
v1.99.3
v1.99.3rc0
v1.99.4
v1.99.4rc0
v1.99.5
v1.99.5rc0
v1.99.6
v1.99.6rc0
v1.99.7
v1.99.7rc0
v1.99.8
v1.99.8rc0
v1.99.9
v1.99.9rc0
v2.*
v2.0.0
v2.0.0rc0
v2.0.0rc1
v2.0.0rc2
v2.0.0rc3
v2.0.1
v2.0.1rc0
v2.0.2
v2.0.2rc0
v2.0.3
v2.0.3rc0
v2.0.4rc0
wireshark-1.*
wireshark-1.11.3
wireshark-1.99.0
wireshark-1.99.1
wireshark-1.99.2
wireshark-1.99.3
wireshark-1.99.4
wireshark-1.99.5
wireshark-1.99.6
wireshark-1.99.7
wireshark-1.99.8
wireshark-1.99.9
wireshark-2.*
wireshark-2.0.0
wireshark-2.0.1
wireshark-2.0.2
wireshark-2.0.3
Database specific
vanir_signatures
[
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"334449315304977340383420241633226719348",
"320932733435266253742538915120566453735",
"245578774751302863541828047293755008713",
"30357838436267856021800050734870027683",
"138813970532645865194505331319396360567",
"307805584734905139821814819274303399748",
"315719582076679645125194644249402846205",
"209976510120667078380335317260493077732",
"146747277072124464506533847220692900739"
]
},
"deprecated": false,
"id": "CVE-2016-5358-01635744",
"source": "https://github.com/wireshark/wireshark/commit/2c13e97d656c1c0ac4d76eb9d307664aae0e0cf7",
"target": {
"file": "epan/dissectors/packet-ppi.c"
},
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "299449988594139569541305770469884692042",
"length": 6352.0
},
"deprecated": false,
"id": "CVE-2016-5358-21f495bd",
"source": "https://github.com/wireshark/wireshark/commit/2c13e97d656c1c0ac4d76eb9d307664aae0e0cf7",
"target": {
"function": "dissect_ppi",
"file": "epan/dissectors/packet-ppi.c"
},
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "338752519889218304733566749802042023821",
"length": 2107.0
},
"deprecated": false,
"id": "CVE-2016-5358-5ce2fd91",
"source": "https://github.com/wireshark/wireshark/commit/2c13e97d656c1c0ac4d76eb9d307664aae0e0cf7",
"target": {
"function": "dissect_pktap",
"file": "epan/dissectors/packet-pktap.c"
},
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "330430542262926018448608795824361140614",
"length": 1564.0
},
"deprecated": false,
"id": "CVE-2016-5358-637a8fc0",
"source": "https://github.com/wireshark/wireshark/commit/2c13e97d656c1c0ac4d76eb9d307664aae0e0cf7",
"target": {
"function": "dissect_rpcap_packet",
"file": "epan/dissectors/packet-rpcap.c"
},
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"27916644768496533656810545275833789355",
"37823342120425800220646364435165916704",
"264994017350731906222936056776478734300",
"132396777522632413076630297376118682332",
"289632527312961041599743416980106338989",
"134593429129036244985834589675552433877",
"115801305615867899831225278823859525566",
"209976510120667078380335317260493077732",
"70616474456708318787207731558451418760"
]
},
"deprecated": false,
"id": "CVE-2016-5358-649fa91b",
"source": "https://github.com/wireshark/wireshark/commit/2c13e97d656c1c0ac4d76eb9d307664aae0e0cf7",
"target": {
"file": "epan/dissectors/packet-pktap.c"
},
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"216969062309645181064252099101574065597",
"144417925569203975010017039560378111186",
"279709717053073643829043742089946626936",
"45601298362245210734312012769402793251",
"170802040358257705377537301921365358538",
"138838526760500685021898488601579542890",
"109083495737063408071250071069583155465",
"225064910552521824428069315849786949102"
]
},
"deprecated": false,
"id": "CVE-2016-5358-d1613c7c",
"source": "https://github.com/wireshark/wireshark/commit/2c13e97d656c1c0ac4d76eb9d307664aae0e0cf7",
"target": {
"file": "epan/dissectors/packet-rpcap.c"
},
"signature_version": "v1"
}
]