CVE-2016-5355

wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.

References

Affected packages

Debian:11 / wireshark

Package

Name: wireshark
Purl: pkg:deb/debian/wireshark?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.4+gdd7746e-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / wireshark

Package

Name: wireshark
Purl: pkg:deb/debian/wireshark?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.4+gdd7746e-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / wireshark

Package

Name: wireshark
Purl: pkg:deb/debian/wireshark?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.4+gdd7746e-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / wireshark

Package

Name: wireshark
Purl: pkg:deb/debian/wireshark?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.4+gdd7746e-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/wireshark/wireshark

Affected ranges

Type: GIT
Repo: https://github.com/wireshark/wireshark
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

3270dfac43da861c714df76513456b46765ff47f

Fixed

5efb45231671baa2db2011d8f67f9d6e72bc455b

Type: GIT
Repo: https://gitlab.com/wireshark/wireshark
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

01b65bf3a8e3d2f856471b0bb5a7e38dabf815f3

Last affected

4fab41a1f0e14e9124ea6a61e7bae42e95599495

Last affected

5819e5b13c0bbd224fde5a4c900ad8e22f09b4cc

Last affected

59ea380c69dca2bc2f97fa97c1bf410bbcd2411c

Last affected

5b6e543233efc5c8abfd8edd6fbf717f7ec3f632

Last affected

7f56a20e1e701216b3c31c3540022f604978b1e3

Last affected

7fc8978399fe7fe20bac8f2ef5f2f15eef4c4698

Last affected

898fa22ad39718f1a7cb9976f61a4f85e4e72b05

Last affected

9a73b827b22c7ce9132e939b9f07ec4425fc2aa6

Last affected

a16e22ed9cbbc599fe8b7b8e40a6696a0138c489

Last affected

b4861da48fa018a82f674161b7335c2e269d33ec

Last affected

bb3e9a0fc7c94f7bde5b62aedfee06f748c1d37f

Last affected

c74c83c36c90e874c0aea0d98a84396852713d1e

Last affected

ee1fce6fb32c55cf1af2fe1778f67eb77c0ff8d4

Last affected

eed34f0ac6696c053585ddf75c5805b3d5b395cf

Last affected

fadb421970e5e2103ebd15ca1e5d19b89d20efa0

Affected versions

Other

backups/ethereal@18706

ethereal-0-3-15

start

ethereal-0.*

ethereal-0.3.15

v1.*

v1.11.0

v1.11.0-rc1

v1.11.1

v1.11.1-rc1

v1.11.2

v1.11.2-rc1

v1.11.3

v1.11.3-rc1

v1.11.4-rc1

v1.12.0

v1.12.0-rc1

v1.12.0-rc2

v1.12.0rc0

v1.12.0rc3

v1.12.1

v1.99.0

v1.99.0-rc1

v1.99.1

v1.99.10rc0

v1.99.1rc0

v1.99.2

v1.99.2rc0

v1.99.3

v1.99.3rc0

v1.99.4

v1.99.4rc0

v1.99.5

v1.99.5rc0

v1.99.6

v1.99.6rc0

v1.99.7

v1.99.7rc0

v1.99.8

v1.99.8rc0

v1.99.9

v1.99.9rc0

v2.*

v2.0.0

v2.0.0rc0

v2.0.0rc1

v2.0.0rc2

v2.0.0rc3

v2.0.1

v2.0.1rc0

v2.1.0rc0

wireshark-1.*

wireshark-1.11.3

wireshark-1.12.0

wireshark-1.12.1

wireshark-1.99.0

wireshark-1.99.1

wireshark-1.99.2

wireshark-1.99.3

wireshark-1.99.4

wireshark-1.99.5

wireshark-1.99.6

wireshark-1.99.7

wireshark-1.99.8

wireshark-1.99.9

wireshark-2.*

wireshark-2.0.0

wireshark-2.0.1

Database specific

{
    "vanir_signatures": [
        {
            "signature_type": "Line",
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2016-5355-430bec25",
            "digest": {
                "line_hashes": [
                    "222472030124558903662423588367175922458",
                    "195759074594662894182382324617615830295",
                    "283796853935284558832892467406390596183",
                    "109201914752022300569507316507146393595",
                    "277084973135359600370079367470878906833",
                    "208459913058928882533967903486234800560",
                    "288380669237646100572132430427755402934",
                    "71371983581895935206773910982285805940",
                    "5686293301648776978992919168810849288",
                    "336895237281205011077460297476857256315",
                    "228950723378601078918892079557320994569",
                    "87081937081611371651809983671600852229",
                    "157000304485411451266701731849443473487",
                    "172667033939294234761467952164003678289",
                    "105236842549951244178939431531586891643",
                    "43820112650451027626426710000672187177",
                    "326752506863499794459234409193910882951",
                    "36041466847695983854234170705769995075",
                    "68552537321264856197070472797328510024",
                    "75783356510037799163678349351110837102"
                ],
                "threshold": 0.9
            },
            "source": "https://github.com/wireshark/wireshark/commit/5efb45231671baa2db2011d8f67f9d6e72bc455b",
            "target": {
                "file": "wiretap/toshiba.c"
            }
        },
        {
            "signature_type": "Function",
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2016-5355-a6150e54",
            "digest": {
                "function_hash": "45551249823097417350531750011362455708",
                "length": 2293.0
            },
            "source": "https://github.com/wireshark/wireshark/commit/5efb45231671baa2db2011d8f67f9d6e72bc455b",
            "target": {
                "file": "wiretap/toshiba.c",
                "function": "parse_toshiba_packet"
            }
        }
    ]
}