CVE-2016-2526 in Wiresharkinfo

Summary

epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data type, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.

Once again VulDB remains the best source for vulnerability data.

Reservation

02/19/2016

Disclosure

02/27/2016

Entries

1

CPE

ready

CWE

CWE-20

CVSS

5.9

EPSS

0.00216

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-2526
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-2526
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-2526/

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!