CVE-2016-4085
Fixed in a distro release EPSS 3%
Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long string in a packet.
Products: oracle solaris, debian_linux, wireshark
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | wireshark | 2.0.0~rc2+g74e5b56-1 |
| Debian 13 | wireshark | 2.0.0~rc2+g74e5b56-1 |
| Debian 14 | wireshark | 2.0.0~rc2+g74e5b56-1 |
| Debian 7 | wireshark | 1.12.1+g01b65bf-4+deb8u6~deb7u1 |
| Debian 8 | wireshark | 1.12.1+g01b65bf-4+deb8u6 |
| Ubuntu 14.04 LTS | wireshark | 1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1 |