CVE-2016-6509

epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

References

Affected packages

Git / github.com/wireshark/wireshark

Affected ranges

Type

GIT

Repo

https://github.com/wireshark/wireshark

Events

Introduced

4fab41a1f0e14e9124ea6a61e7bae42e95599495

Last Affected

dd7746e6f1b034048cd986ca6f44291e712cc1fc

Database specific

Show details

{
    "cpe":  [
        "cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "1.12.0"
        },
        {
            "last_affected":  "1.12.0"
        },
        {
            "introduced":  "1.12.1"
        },
        {
            "last_affected":  "1.12.1"
        },
        {
            "introduced":  "1.12.2"
        },
        {
            "last_affected":  "1.12.2"
        },
        {
            "introduced":  "1.12.3"
        },
        {
            "last_affected":  "1.12.3"
        },
        {
            "introduced":  "1.12.4"
        },
        {
            "last_affected":  "1.12.4"
        },
        {
            "introduced":  "1.12.5"
        },
        {
            "last_affected":  "1.12.5"
        },
        {
            "introduced":  "1.12.6"
        },
        {
            "last_affected":  "1.12.6"
        },
        {
            "introduced":  "1.12.7"
        },
        {
            "last_affected":  "1.12.7"
        },
        {
            "introduced":  "1.12.8"
        },
        {
            "last_affected":  "1.12.8"
        },
        {
            "introduced":  "1.12.9"
        },
        {
            "last_affected":  "1.12.9"
        },
        {
            "introduced":  "1.12.10"
        },
        {
            "last_affected":  "1.12.10"
        },
        {
            "introduced":  "1.12.11"
        },
        {
            "last_affected":  "1.12.11"
        },
        {
            "introduced":  "1.12.12"
        },
        {
            "last_affected":  "1.12.12"
        },
        {
            "introduced":  "2.0.0"
        },
        {
            "last_affected":  "2.0.0"
        },
        {
            "introduced":  "2.0.1"
        },
        {
            "last_affected":  "2.0.1"
        },
        {
            "introduced":  "2.0.2"
        },
        {
            "last_affected":  "2.0.2"
        },
        {
            "introduced":  "2.0.3"
        },
        {
            "last_affected":  "2.0.3"
        },
        {
            "introduced":  "2.0.4"
        },
        {
            "last_affected":  "2.0.4"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

1.*

1.12.0

1.12.1

1.12.10

1.12.11

1.12.12

1.12.2

1.12.3

1.12.4

1.12.5

1.12.6

1.12.7

1.12.8

1.12.9

2.*

2.0.0

2.0.1

2.0.2

2.0.3

2.0.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6509.json"

Git / gitlab.com/wireshark/wireshark