← Back

CVE-2016-4085

nvd nist
Published: Apr 25, 2016Modified: May 6, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long string in a packet.

Affected (16)

1 product
Solaris
1 product
Debian Linux
1 product
Wireshark
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 11.3
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 8.0
Configuration C
14 vulnerable
Vulnerable SoftwareAffected Versions
Wireshark
Version 1.12.0
Version 1.12.10
Version 1.12.1
Version 1.12.2
Version 1.12.3
Version 1.12.4
Version 1.12.5
Version 1.12.6
Version 1.12.7
Version 1.12.8
Version 1.12.9
Version 2.0.0
Version 2.0.1
Version 2.0.2

References (14)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking

Timeline

No history available yet.