epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.10.6-1", "binary_name": "libwireshark-data" }, { "binary_version": "1.10.6-1", "binary_name": "libwireshark-dev" }, { "binary_version": "1.10.6-1", "binary_name": "libwireshark3" }, { "binary_version": "1.10.6-1", "binary_name": "libwiretap-dev" }, { "binary_version": "1.10.6-1", "binary_name": "libwiretap3" }, { "binary_version": "1.10.6-1", "binary_name": "libwsutil-dev" }, { "binary_version": "1.10.6-1", "binary_name": "libwsutil3" }, { "binary_version": "1.10.6-1", "binary_name": "tshark" }, { "binary_version": "1.10.6-1", "binary_name": "wireshark" }, { "binary_version": "1.10.6-1", "binary_name": "wireshark-common" }, { "binary_version": "1.10.6-1", "binary_name": "wireshark-dbg" }, { "binary_version": "1.10.6-1", "binary_name": "wireshark-dev" }, { "binary_version": "1.10.6-1", "binary_name": "wireshark-doc" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "libwireshark-data" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "libwireshark-dev" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "libwireshark8" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "libwireshark8-dbgsym" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "libwiretap-dev" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "libwiretap6" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "libwiretap6-dbgsym" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "libwscodecs1" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "libwscodecs1-dbgsym" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "libwsutil-dev" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "libwsutil7" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "libwsutil7-dbgsym" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "tshark" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "tshark-dbgsym" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "wireshark" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "wireshark-common" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "wireshark-common-dbgsym" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "wireshark-dev" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "wireshark-doc" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "wireshark-gtk" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "wireshark-gtk-dbgsym" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "wireshark-qt" }, { "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04", "binary_name": "wireshark-qt-dbgsym" } ] }