CVE-2016-4076

MEDIUM

Wireshark 2.0.x - Denial of Service in NCP Dissector

Title source: llm
STIX 2.1

Description

epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1035685
Vendor Advisory x_refsource_confirm
http://www.wireshark.org/security/wnpa-sec-2016-19.html

Scores

CVSS v3 5.9
EPSS 0.0017
EPSS Percentile 37.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-284
Status published
Products (3)
wireshark/wireshark 2.0.0
wireshark/wireshark 2.0.1
wireshark/wireshark 2.0.2
Published Apr 25, 2016
Tracked Since Feb 18, 2026