Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.9

Wireshark may freeze when analyzing DTN traffic

CVE-2016-9375 · published 9 years ago
Summary

Wireshark versions 2.0.0‑2.0.7 and 2.2.0‑2.2.1 on Debian can get stuck in an endless loop when they encounter certain DTN (Delay‑Tolerant Networking) data, either from live traffic or a saved capture file. This can make the program unresponsive and prevent further analysis. Upgrade Wireshark to a newer release where the DTN handling code has been corrected, or avoid opening files that contain the problematic DTN packets until you can update.

What to do
  • Update debian wireshark to version 2.2.2+g9c5aae3-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian wireshark < 2.2.2+g9c5aae3-1
Fix: upgrade to 2.2.2+g9c5aae3-1
Debian:13 debian wireshark < 2.2.2+g9c5aae3-1
Fix: upgrade to 2.2.2+g9c5aae3-1
Debian:14 debian wireshark < 2.2.2+g9c5aae3-1
Fix: upgrade to 2.2.2+g9c5aae3-1
– wireshark wireshark 2.0.0
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.2.0
2.2.1
cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*
– debian debian_linux 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Original advisory text
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c ...
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful.
References
Severity
5.9 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-20Improper Input Validation
CWE-399Resource Management Errors
Timeline
Published17 Nov 2016
Updated3 Nov 2026
First seen22 Sep 2026
Sources
DEBIAN-CVE-2016-9375 · OSV
CVE-2016-9375 · NVD
Track software like this
Free during beta