CVE-2016-4078

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-4078
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-4078.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-4078
Downstream
Published
2016-04-25T10:59:03.490Z
Modified
2026-04-16T01:49:12.823499601Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted packet, related to epan/dissectors/packet-capwap.c and epan/dissectors/packet-ieee80211.c.

References

Affected packages

Git / github.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://github.com/wireshark/wireshark
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4fab41a1f0e14e9124ea6a61e7bae42e95599495
Last affected
01b65bf3a8e3d2f856471b0bb5a7e38dabf815f3
Last affected
898fa22ad39718f1a7cb9976f61a4f85e4e72b05
Last affected
bb3e9a0fc7c94f7bde5b62aedfee06f748c1d37f
Last affected
b4861da48fa018a82f674161b7335c2e269d33ec
Last affected
5819e5b13c0bbd224fde5a4c900ad8e22f09b4cc
Last affected
ee1fce6fb32c55cf1af2fe1778f67eb77c0ff8d4
Last affected
7fc8978399fe7fe20bac8f2ef5f2f15eef4c4698
Last affected
5b6e543233efc5c8abfd8edd6fbf717f7ec3f632
Last affected
fadb421970e5e2103ebd15ca1e5d19b89d20efa0
Last affected
7f56a20e1e701216b3c31c3540022f604978b1e3
Last affected
9a73b827b22c7ce9132e939b9f07ec4425fc2aa6
Last affected
59ea380c69dca2bc2f97fa97c1bf410bbcd2411c
Last affected
a16e22ed9cbbc599fe8b7b8e40a6696a0138c489
Database specific 
{
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.12.0"
        },
        {
            "last_affected": "1.12.1"
        },
        {
            "last_affected": "1.12.2"
        },
        {
            "last_affected": "1.12.3"
        },
        {
            "last_affected": "1.12.4"
        },
        {
            "last_affected": "1.12.5"
        },
        {
            "last_affected": "1.12.6"
        },
        {
            "last_affected": "1.12.7"
        },
        {
            "last_affected": "1.12.8"
        },
        {
            "last_affected": "1.12.9"
        },
        {
            "last_affected": "1.12.10"
        },
        {
            "last_affected": "2.0.0"
        },
        {
            "last_affected": "2.0.1"
        },
        {
            "last_affected": "2.0.2"
        }
    ],
    "cpe": [
        "cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:1.12.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*"
    ]
}

Affected versions

Other
backups/ethereal@18706
ethereal-0-3-15
start
ethereal-0.*
ethereal-0.3.15
v1.*
v1.11.0
v1.11.0-rc1
v1.11.1
v1.11.1-rc1
v1.11.2
v1.11.2-rc1
v1.11.3
v1.11.3-rc1
v1.11.4-rc1
v1.12.0
v1.12.0-rc1
v1.12.0-rc2
v1.12.0rc0
v1.12.0rc3
v1.12.1
v1.12.10
v1.12.10rc0
v1.12.2
v1.12.2rc0
v1.12.3
v1.12.3rc0
v1.12.4
v1.12.4rc0
v1.12.5
v1.12.5rc0
v1.12.6
v1.12.6rc0
v1.12.7
v1.12.7rc0
v1.12.8
v1.12.8rc0
v1.12.9
v1.12.9rc0
v1.99.0
v1.99.0-rc1
v1.99.1
v1.99.10rc0
v1.99.1rc0
v1.99.2
v1.99.2rc0
v1.99.3
v1.99.3rc0
v1.99.4
v1.99.4rc0
v1.99.5
v1.99.5rc0
v1.99.6
v1.99.6rc0
v1.99.7
v1.99.7rc0
v1.99.8
v1.99.8rc0
v1.99.9
v1.99.9rc0
v2.*
v2.0.0
v2.0.0rc0
v2.0.0rc1
v2.0.0rc2
v2.0.0rc3
v2.0.1
v2.0.1rc0
v2.0.2
v2.0.2rc0
wireshark-1.*
wireshark-1.11.3
wireshark-1.12.0
wireshark-1.12.1
wireshark-1.12.10
wireshark-1.12.2
wireshark-1.12.3
wireshark-1.12.4
wireshark-1.12.5
wireshark-1.12.6
wireshark-1.12.7
wireshark-1.12.8
wireshark-1.12.9
wireshark-1.99.0
wireshark-1.99.1
wireshark-1.99.2
wireshark-1.99.3
wireshark-1.99.4
wireshark-1.99.5
wireshark-1.99.6
wireshark-1.99.7
wireshark-1.99.8
wireshark-1.99.9
wireshark-2.*
wireshark-2.0.0
wireshark-2.0.1
wireshark-2.0.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-4078.json"