Vulnerability-Lookup

CVE-2016-9374 (GCVE-0-2016-9374)

Vulnerability from cvelistv5 – Published: 2016-11-17 05:48 – Updated: 2024-08-06 02:50

Summary

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.

Severity

5.9 (Medium)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://www.wireshark.org/security/wnpa-sec-2016-…	x_refsource_CONFIRM
https://code.wireshark.org/review/gitweb?p=wiresh…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037313	vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2016/dsa-3719	vendor-advisoryx_refsource_DEBIAN
https://bugs.wireshark.org/bugzilla/show_bug.cgi?…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/94369	vdb-entryx_refsource_BID

Date Public

2016-11-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:50:37.387Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2016-59.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900"
          },
          {
            "name": "1037313",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037313"
          },
          {
            "name": "DSA-3719",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3719"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953"
          },
          {
            "name": "94369",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94369"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-27T09:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2016-59.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900"
        },
        {
          "name": "1037313",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037313"
        },
        {
          "name": "DSA-3719",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3719"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953"
        },
        {
          "name": "94369",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94369"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-9374",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2016-59.html",
              "refsource": "CONFIRM",
              "url": "https://www.wireshark.org/security/wnpa-sec-2016-59.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a5770b6559b6e6765c4ef800e85ae42781ea4900",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a5770b6559b6e6765c4ef800e85ae42781ea4900"
            },
            {
              "name": "1037313",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037313"
            },
            {
              "name": "DSA-3719",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3719"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953"
            },
            {
              "name": "94369",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94369"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-9374",
    "datePublished": "2016-11-17T05:48:00.000Z",
    "dateReserved": "2016-11-16T00:00:00.000Z",
    "dateUpdated": "2024-08-06T02:50:37.387Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2016-9374",
      "date": "2026-09-16",
      "epss": "0.01595",
      "percentile": "0.74475"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2EF0B55F-A412-48E2-9047-7CCA8442766D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D8BE013B-8615-49DB-939E-B7E289171467\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FDB30F17-A41A-4F09-977F-AB91E509247E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D900BA83-D5D3-4A8D-8C32-D135A3E5190E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A630396B-1D60-4C45-9A45-F15E542B1C1C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F9A6D9AC-17D2-4A8F-A32A-23E8854D5514\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"32F65580-D1F4-4ABC-A358-545BF29D8089\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.\"}, {\"lang\": \"es\", \"value\": \"En Wireshark 2.2.0 hasta la versi\\u00f3n 2.2.1 y 2.0.0 hasta la versi\\u00f3n 2.0.7, el disector AllJoyn podr\\u00eda caerse con una sobre lectura del b\\u00fafer, provocada por el tr\\u00e1fico de red o un archivo de captura. Esto fue abordado en epan/dissectors/packet-alljoyn.c asegurando que una variable de longitud rastre\\u00f3 adecuadamente el estado de una variable de firma.\"}]",
      "id": "CVE-2016-9374",
      "lastModified": "2024-11-21T03:01:02.847",
      "metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.9, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.2, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:N/I:N/A:P\", \"baseScore\": 4.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2016-11-17T05:59:03.180",
      "references": "[{\"url\": \"http://www.debian.org/security/2016/dsa-3719\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/94369\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1037313\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.wireshark.org/security/wnpa-sec-2016-59.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.debian.org/security/2016/dsa-3719\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/94369\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1037313\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.wireshark.org/security/wnpa-sec-2016-59.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}, {\"lang\": \"en\", \"value\": \"CWE-399\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2016-9374\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2016-11-17T05:59:03.180\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.\"},{\"lang\":\"es\",\"value\":\"En Wireshark 2.2.0 hasta la versi\u00f3n 2.2.1 y 2.0.0 hasta la versi\u00f3n 2.0.7, el disector AllJoyn podr\u00eda caerse con una sobre lectura del b\u00fafer, provocada por el tr\u00e1fico de red o un archivo de captura. Esto fue abordado en epan/dissectors/packet-alljoyn.c asegurando que una variable de longitud rastre\u00f3 adecuadamente el estado de una variable de firma.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:N/A:P\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"},{\"lang\":\"en\",\"value\":\"CWE-399\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E2A443-32DB-4C8B-8D2D-AE4F80A154A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EF0B55F-A412-48E2-9047-7CCA8442766D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8BE013B-8615-49DB-939E-B7E289171467\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDB30F17-A41A-4F09-977F-AB91E509247E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D900BA83-D5D3-4A8D-8C32-D135A3E5190E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A630396B-1D60-4C45-9A45-F15E542B1C1C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9A6D9AC-17D2-4A8F-A32A-23E8854D5514\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32F65580-D1F4-4ABC-A358-545BF29D8089\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]}],\"references\":[{\"url\":\"http://www.debian.org/security/2016/dsa-3719\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/94369\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1037313\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.wireshark.org/security/wnpa-sec-2016-59.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2016/dsa-3719\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/94369\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1037313\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.wireshark.org/security/wnpa-sec-2016-59.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T11:57:54+00:00",
      "cve": "CVE-2016-9374",
      "id": "CVE-2016-9374",
      "initial_release_date": "2016-11-16T00:00:00+00:00",
      "product_status:known_affected": "9",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "wireshark: AllJoyn crash (wnpa-sec-2016-59)",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-9374.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-27T01:38:17Z",
      "cve": "CVE-2016-9374",
      "id": "CVE-2016-9374",
      "initial_release_date": "2023-02-15T04:56:01Z",
      "product_status:known_affected": "1",
      "product_status:recommended": "592",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2016-9374",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2016-9374.json",
      "version": "16"
    }
  }
}

CERTFR-2016-AVI-381

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Wireshark. Elles permettent à un attaquant de provoquer un déni de service à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Wireshark	Wireshark	Wireshark versions 2.0.x antérieures à 2.0.8
	Wireshark	Wireshark	Wireshark versions 2.2.x antérieures à 2.2.2

References

Title

Publication Time

CERTFR-2016-AVI-381

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Wireshark. Elles permettent à un attaquant de provoquer un déni de service à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Wireshark	Wireshark	Wireshark versions 2.0.x antérieures à 2.0.8
	Wireshark	Wireshark	Wireshark versions 2.2.x antérieures à 2.2.2

References

Title

Publication Time

CNVD-2016-11352

Vulnerability from cnvd - Published: 2016-11-21

Title

Wireshark AllJoyn解析器缓拒绝服务漏洞

Description

Wireshark（前称Ethereal）是Wireshark团队开发的一套网络数据包分析软件。该软件的功能是截取网络数据包，并显示出详细的数据以供分析。 Wireshark 2.2.0至2.2.1版本和2.0.0至2.0.7版本中的AllJoyn解析器存在拒绝服务漏洞。攻击者可利用该漏洞造成拒绝服务（崩溃）。

Severity

中

Patch Name

Wireshark AllJoyn解析器缓拒绝服务漏洞的补丁

Patch Description

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://www.wireshark.org/security/wnpa-sec-2016-59.html

Reference

http://www.securityfocus.com/bid/94369

Impacted products

Name
['Wireshark Wireshark >= 2.2.0，<=2.2.1', 'Wireshark Wireshark >=2.0.0，<=2.0.7']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "94369"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-9374"
    }
  },
  "description": "Wireshark\uff08\u524d\u79f0Ethereal\uff09\u662fWireshark\u56e2\u961f\u5f00\u53d1\u7684\u4e00\u5957\u7f51\u7edc\u6570\u636e\u5305\u5206\u6790\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u7684\u529f\u80fd\u662f\u622a\u53d6\u7f51\u7edc\u6570\u636e\u5305\uff0c\u5e76\u663e\u793a\u51fa\u8be6\u7ec6\u7684\u6570\u636e\u4ee5\u4f9b\u5206\u6790\u3002\r\n\r\nWireshark 2.2.0\u81f32.2.1\u7248\u672c\u548c2.0.0\u81f32.0.7\u7248\u672c\u4e2d\u7684AllJoyn\u89e3\u6790\u5668\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5d29\u6e83\uff09\u3002",
  "discovererName": "Wireshark",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.wireshark.org/security/wnpa-sec-2016-59.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-11352",
  "openTime": "2016-11-21",
  "patchDescription": "Wireshark\uff08\u524d\u79f0Ethereal\uff09\u662fWireshark\u56e2\u961f\u5f00\u53d1\u7684\u4e00\u5957\u7f51\u7edc\u6570\u636e\u5305\u5206\u6790\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u7684\u529f\u80fd\u662f\u622a\u53d6\u7f51\u7edc\u6570\u636e\u5305\uff0c\u5e76\u663e\u793a\u51fa\u8be6\u7ec6\u7684\u6570\u636e\u4ee5\u4f9b\u5206\u6790\u3002\r\n\r\nWireshark 2.2.0\u81f32.2.1\u7248\u672c\u548c2.0.0\u81f32.0.7\u7248\u672c\u4e2d\u7684AllJoyn\u89e3\u6790\u5668\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5d29\u6e83\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Wireshark AllJoyn\u89e3\u6790\u5668\u7f13\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Wireshark Wireshark \u003e= 2.2.0\uff0c\u003c=2.2.1",
      "Wireshark Wireshark \u003e=2.0.0\uff0c\u003c=2.0.7"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/94369",
  "serverity": "\u4e2d",
  "submitTime": "2016-11-18",
  "title": "Wireshark AllJoyn\u89e3\u6790\u5668\u7f13\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

FKIE_CVE-2016-9374

Vulnerability from fkie_nvd - Published: 2016-11-17 05:59 - Updated: 2026-06-17 00:55

Severity

5.9 (Medium) - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

URL	Tags
cve@mitre.org	http://www.debian.org/security/2016/dsa-3719	Third Party Advisory
cve@mitre.org	http://www.securityfocus.com/bid/94369	Third Party Advisory, VDB Entry
cve@mitre.org	http://www.securitytracker.com/id/1037313
cve@mitre.org	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953	Issue Tracking
cve@mitre.org	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900
cve@mitre.org	https://www.wireshark.org/security/wnpa-sec-2016-59.html	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2016/dsa-3719	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/94369	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1037313
af854a3a-2127-422b-91ae-364da2661108	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953	Issue Tracking
af854a3a-2127-422b-91ae-364da2661108	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900
af854a3a-2127-422b-91ae-364da2661108	https://www.wireshark.org/security/wnpa-sec-2016-59.html	Vendor Advisory

Impacted products

Vendor	Product	Version
wireshark	wireshark	2.0.0
wireshark	wireshark	2.0.1
wireshark	wireshark	2.0.2
wireshark	wireshark	2.0.3
wireshark	wireshark	2.0.4
wireshark	wireshark	2.0.5
wireshark	wireshark	2.0.6
wireshark	wireshark	2.0.7
wireshark	wireshark	2.2.0
wireshark	wireshark	2.2.1
debian	debian_linux	8.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "80E2A443-32DB-4C8B-8D2D-AE4F80A154A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2EF0B55F-A412-48E2-9047-7CCA8442766D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "C45C7F24-9B97-4FF6-AFE8-102EDA0B26D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8BE013B-8615-49DB-939E-B7E289171467",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDB30F17-A41A-4F09-977F-AB91E509247E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "D900BA83-D5D3-4A8D-8C32-D135A3E5190E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "A630396B-1D60-4C45-9A45-F15E542B1C1C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9A6D9AC-17D2-4A8F-A32A-23E8854D5514",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "32F65580-D1F4-4ABC-A358-545BF29D8089",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6568A81-BE0B-4AEF-808C-74CD0C2EE9FD",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable."
    },
    {
      "lang": "es",
      "value": "En Wireshark 2.2.0 hasta la versi\u00f3n 2.2.1 y 2.0.0 hasta la versi\u00f3n 2.0.7, el disector AllJoyn podr\u00eda caerse con una sobre lectura del b\u00fafer, provocada por el tr\u00e1fico de red o un archivo de captura. Esto fue abordado en epan/dissectors/packet-alljoyn.c asegurando que una variable de longitud rastre\u00f3 adecuadamente el estado de una variable de firma."
    }
  ],
  "id": "CVE-2016-9374",
  "lastModified": "2026-06-17T00:55:54.597",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 5.9,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2016-11-17T05:59:03.180",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2016/dsa-3719"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/94369"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id/1037313"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.wireshark.org/security/wnpa-sec-2016-59.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2016/dsa-3719"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/94369"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1037313"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.wireshark.org/security/wnpa-sec-2016-59.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        },
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-6VW8-W3Q3-4CMF

Vulnerability from github – Published: 2022-05-17 02:24 – Updated: 2025-04-12 13:06

Details

Severity

5.9 (Medium)


                  
                    CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2016-9374"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2016-11-17T05:59:00Z",
    "severity": "MODERATE"
  },
  "details": "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.",
  "id": "GHSA-6vw8-w3q3-4cmf",
  "modified": "2025-04-12T13:06:33Z",
  "published": "2022-05-17T02:24:18Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9374"
    },
    {
      "type": "WEB",
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953"
    },
    {
      "type": "WEB",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a5770b6559b6e6765c4ef800e85ae42781ea4900"
    },
    {
      "type": "WEB",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a5770b6559b6e6765c4ef800e85ae42781ea4900"
    },
    {
      "type": "WEB",
      "url": "https://www.wireshark.org/security/wnpa-sec-2016-59.html"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2016/dsa-3719"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/94369"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1037313"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2016-9374

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2016-9374

Aliases

CVE-2016-9374

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2016-9374",
    "description": "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.",
    "id": "GSD-2016-9374",
    "references": [
      "https://www.suse.com/security/cve/CVE-2016-9374.html",
      "https://www.debian.org/security/2016/dsa-3719",
      "https://advisories.mageia.org/CVE-2016-9374.html",
      "https://security.archlinux.org/CVE-2016-9374"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2016-9374"
      ],
      "details": "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.",
      "id": "GSD-2016-9374",
      "modified": "2023-12-13T01:21:21.956969Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2016-9374",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.wireshark.org/security/wnpa-sec-2016-59.html",
            "refsource": "CONFIRM",
            "url": "https://www.wireshark.org/security/wnpa-sec-2016-59.html"
          },
          {
            "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a5770b6559b6e6765c4ef800e85ae42781ea4900",
            "refsource": "CONFIRM",
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a5770b6559b6e6765c4ef800e85ae42781ea4900"
          },
          {
            "name": "1037313",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1037313"
          },
          {
            "name": "DSA-3719",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2016/dsa-3719"
          },
          {
            "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953",
            "refsource": "CONFIRM",
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953"
          },
          {
            "name": "94369",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/94369"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-9374"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                },
                {
                  "lang": "en",
                  "value": "CWE-399"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a5770b6559b6e6765c4ef800e85ae42781ea4900",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking",
                "Patch"
              ],
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a5770b6559b6e6765c4ef800e85ae42781ea4900"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking"
              ],
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953"
            },
            {
              "name": "https://www.wireshark.org/security/wnpa-sec-2016-59.html",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://www.wireshark.org/security/wnpa-sec-2016-59.html"
            },
            {
              "name": "94369",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/94369"
            },
            {
              "name": "DSA-3719",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.debian.org/security/2016/dsa-3719"
            },
            {
              "name": "1037313",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id/1037313"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2017-07-28T01:29Z",
      "publishedDate": "2016-11-17T05:59Z"
    }
  }
}

OPENSUSE-SU-2024:10199-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

wireshark-2.2.2-1.1 on GA media

Severity

Moderate

Scope

262 vulnerabilities in this advisory, including CVE-2016-9374.

CVE-2016-9374

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 16 products

Open the full advisory

SUSE-SU-2017:1174-1

Vulnerability from csaf_suse - Published: 2017-05-04 10:03 - Updated: 2017-05-04 10:03

Summary

Security update for wireshark

Severity

Moderate

Scope

23 vulnerabilities in this advisory, including CVE-2016-9374.

CVE-2016-9374

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 29 products

Open the full advisory

SUSE-SU-2017:1442-1

Vulnerability from csaf_suse - Published: 2017-05-30 11:22 - Updated: 2017-05-30 11:22

Summary

Security update for wireshark

Severity

Moderate

Scope

24 vulnerabilities in this advisory, including CVE-2016-9374.

CVE-2016-9374

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 109 products

Open the full advisory

ubuntu-cve-2016-9374

Vulnerability from osv_ubuntu

Published

2016-11-17 05:59

Modified

2026-04-22 07:38

Summary

Details

Severity

5.9 (Medium)


                    
                      CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2016-9374	REPORT
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?…	REPORT
	https://code.wireshark.org/review/gitweb?p=wiresh…	REPORT
	https://www.wireshark.org/security/wnpa-sec-2016-…	REPORT
	https://www.cve.org/CVERecord?id=CVE-2016-9374	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libwireshark-data",
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"
          },
          {
            "binary_name": "libwireshark5",
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"
          },
          {
            "binary_name": "libwiretap4",
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"
          },
          {
            "binary_name": "libwsutil4",
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"
          },
          {
            "binary_name": "tshark",
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"
          },
          {
            "binary_name": "wireshark",
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"
          },
          {
            "binary_name": "wireshark-common",
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"
          },
          {
            "binary_name": "wireshark-qt",
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "wireshark",
        "purl": "pkg:deb/ubuntu/wireshark@1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.10.2-1",
        "1.10.3-1",
        "1.10.5-1ubuntu1",
        "1.10.5-2",
        "1.10.6-1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libwireshark-data",
            "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04"
          },
          {
            "binary_name": "libwireshark8",
            "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04"
          },
          {
            "binary_name": "libwiretap6",
            "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04"
          },
          {
            "binary_name": "libwscodecs1",
            "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04"
          },
          {
            "binary_name": "libwsutil7",
            "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04"
          },
          {
            "binary_name": "tshark",
            "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04"
          },
          {
            "binary_name": "wireshark",
            "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04"
          },
          {
            "binary_name": "wireshark-common",
            "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04"
          },
          {
            "binary_name": "wireshark-gtk",
            "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04"
          },
          {
            "binary_name": "wireshark-qt",
            "binary_version": "2.2.6+g32dac6a-2ubuntu0.16.04"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "wireshark",
        "purl": "pkg:deb/ubuntu/wireshark@2.2.6+g32dac6a-2ubuntu0.16.04?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.2.6+g32dac6a-2ubuntu0.16.04"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.12.7+g7fc8978-1",
        "1.12.8+g5b6e543-2",
        "2.0.1+g59ea380-3build1",
        "2.0.2+ga16e22e-1"
      ]
    }
  ],
  "aliases": [],
  "details": "In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.",
  "id": "UBUNTU-CVE-2016-9374",
  "modified": "2026-04-22T07:38:04Z",
  "published": "2016-11-17T05:59:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-9374"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12953"
    },
    {
      "type": "REPORT",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a5770b6559b6e6765c4ef800e85ae42781ea4900"
    },
    {
      "type": "REPORT",
      "url": "https://www.wireshark.org/security/wnpa-sec-2016-59.html"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-9374"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2016-9374"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2016-9374 (GCVE-0-2016-9374)

Solution

Solution

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature

Related by attack behaviour