Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.9
CVE-2016-7178: Wireshark 2.x before 2.0.6 can crash from crafted packet
CVE-2016-7178 · published 10 years ago
Summary
The Wireshark network analyzer supplied in Debian can stop working if it receives a specially formed data packet. This happens because the program does not set aside enough memory for some information it processes, leading to a crash. Update Wireshark to version 2.0.6 or later to stop the problem.
What to do
- Update debian wireshark to version 2.2.0~rc1+g438c022-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | wireshark |
< 2.2.0~rc1+g438c022-1 Fix: upgrade to 2.2.0~rc1+g438c022-1
|
| Debian:13 | debian | wireshark |
< 2.2.0~rc1+g438c022-1 Fix: upgrade to 2.2.0~rc1+g438c022-1
|
| Debian:14 | debian | wireshark |
< 2.2.0~rc1+g438c022-1 Fix: upgrade to 2.2.0~rc1+g438c022-1
|
| – | wireshark | wireshark |
2.0.0 2.0.1 2.0.2 2.0.3 2.0.4 2.0.5 cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:* |
| – | debian | debian_linux |
8.0 cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
Original advisory text
epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause ...
epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.
References
- https://security-tracker.debian.org/tracker/CVE-2016-7178 Vendor Advisory
- http://www.debian.org/security/2016/dsa-3671 Third Party Advisory
- http://www.securitytracker.com/id/1036760 Third Party Advisory
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12751 Issue Tracking
- https://code.wireshark.org/review/17094 Issue Tracking Patch
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=315bba7c...
- https://www.wireshark.org/security/wnpa-sec-2016-53.html Vendor Advisory
Severity
5.9
Medium
Type
CWE-787Out-of-bounds Write
Timeline
Published9 Sep 2016
Updated29 Oct 2026
First seen22 Sep 2026
Track software like this
Free during beta