CVE-2016-7958

EPSS 0.39%
Published 12.04.2017 10:59:00
Last modified 20.04.2025 01:37:25
Source cve@mitre.org
Teams watchlist Login
Open Login

In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/CMakeLists.txt by registering this dissector.

Affected products Warnungen 0 Metrics 3 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Wireshark ≫ Wireshark Version2.2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.39%	0.573

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/93463

Third Party Advisory

VDB Entry

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12945

Patch

Issue Tracking

https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=67597cb2457fb843fa97d3f2c87b82dad6f0de07

https://www.wireshark.org/security/wnpa-sec-2016-57.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-7958

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-7958

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-7958

EUVD