CVE-2016-9376

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file

published November 17, 2016

CVSS
—
EPSS
2%
Percentile
75.2
In the wild
Unconfirmed
What it is

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01582 · 75.2th percentile
Published
2016-11-17T05:48Z
EPSS history
Timeline
  • 17 NOV 05:48Z
    In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file
    cvelistv5