CVE-2016-5355

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2016-5355
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-5355.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-5355
Downstream
Related
Published
2016-08-07T16:59:09.503Z
Modified
2025-11-19T23:53:41.344008Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.

References

Affected packages

Git / github.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://github.com/wireshark/wireshark
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
3270dfac43da861c714df76513456b46765ff47f
Fixed
5efb45231671baa2db2011d8f67f9d6e72bc455b

Affected versions

Other

backups/ethereal@18706
ethereal-0-3-15
start

ethereal-0.*

ethereal-0.3.15

v1.*

v1.11.0
v1.11.0-rc1
v1.11.1
v1.11.1-rc1
v1.11.2
v1.11.2-rc1
v1.11.3
v1.11.3-rc1
v1.11.4-rc1
v1.99.0
v1.99.0-rc1
v1.99.1
v1.99.10rc0
v1.99.1rc0
v1.99.2
v1.99.2rc0
v1.99.3
v1.99.3rc0
v1.99.4
v1.99.4rc0
v1.99.5
v1.99.5rc0
v1.99.6
v1.99.6rc0
v1.99.7
v1.99.7rc0
v1.99.8
v1.99.8rc0
v1.99.9
v1.99.9rc0

v2.*

v2.1.0rc0

wireshark-1.*

wireshark-1.11.3
wireshark-1.99.0
wireshark-1.99.1
wireshark-1.99.2
wireshark-1.99.3
wireshark-1.99.4
wireshark-1.99.5
wireshark-1.99.6
wireshark-1.99.7
wireshark-1.99.8
wireshark-1.99.9

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "source": "https://github.com/wireshark/wireshark/commit/5efb45231671baa2db2011d8f67f9d6e72bc455b",
        "signature_type": "Line",
        "target": {
            "file": "wiretap/toshiba.c"
        },
        "id": "CVE-2016-5355-430bec25",
        "digest": {
            "line_hashes": [
                "222472030124558903662423588367175922458",
                "195759074594662894182382324617615830295",
                "283796853935284558832892467406390596183",
                "109201914752022300569507316507146393595",
                "277084973135359600370079367470878906833",
                "208459913058928882533967903486234800560",
                "288380669237646100572132430427755402934",
                "71371983581895935206773910982285805940",
                "5686293301648776978992919168810849288",
                "336895237281205011077460297476857256315",
                "228950723378601078918892079557320994569",
                "87081937081611371651809983671600852229",
                "157000304485411451266701731849443473487",
                "172667033939294234761467952164003678289",
                "105236842549951244178939431531586891643",
                "43820112650451027626426710000672187177",
                "326752506863499794459234409193910882951",
                "36041466847695983854234170705769995075",
                "68552537321264856197070472797328510024",
                "75783356510037799163678349351110837102"
            ],
            "threshold": 0.9
        },
        "deprecated": false
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/wireshark/wireshark/commit/3270dfac43da861c714df76513456b46765ff47f",
        "signature_type": "Function",
        "target": {
            "function": "parse_toshiba_packet",
            "file": "wiretap/toshiba.c"
        },
        "id": "CVE-2016-5355-44f1a51b",
        "digest": {
            "length": 2479.0,
            "function_hash": "88309026750793822074938174147946152928"
        },
        "deprecated": false
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/wireshark/wireshark/commit/3270dfac43da861c714df76513456b46765ff47f",
        "signature_type": "Line",
        "target": {
            "file": "wiretap/toshiba.c"
        },
        "id": "CVE-2016-5355-9f2be232",
        "digest": {
            "line_hashes": [
                "72302133209966418500491502823078993562",
                "65751126460123115645082010701549214055",
                "63620029592010607307553349671698053141",
                "36968158628528279793305526355192498466",
                "205212885502665659664724582713521958156",
                "156545002709525894075805155748272119333",
                "310550222594586872448747828688649468287",
                "111081263017908559084416960774253831119",
                "331820378455773273340130334246211456419",
                "87081937081611371651809983671600852229",
                "157000304485411451266701731849443473487",
                "142717321117965291651073929275971677522",
                "3893015500546448625981737174454852359",
                "295760793327389517273004739152084809025"
            ],
            "threshold": 0.9
        },
        "deprecated": false
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/wireshark/wireshark/commit/5efb45231671baa2db2011d8f67f9d6e72bc455b",
        "signature_type": "Function",
        "target": {
            "function": "parse_toshiba_packet",
            "file": "wiretap/toshiba.c"
        },
        "id": "CVE-2016-5355-a6150e54",
        "digest": {
            "length": 2293.0,
            "function_hash": "45551249823097417350531750011362455708"
        },
        "deprecated": false
    }
]

Git / gitlab.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://gitlab.com/wireshark/wireshark
Events
Introduced
0 Unknown introduced commit / All previous commits are affected