CVE-2016-4416

MEDIUM

Wireshark 2.x - Denial of Service via IEEE 802.11 Grouping Subfield

Title source: llm
STIX 2.1

Description

epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.2 mishandles the Grouping subfield, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
https://www.wireshark.org/security/wnpa-sec-2016-13.html

Scores

CVSS v3 5.9
EPSS 0.0011
EPSS Percentile 29.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-119
Status published
Products (2)
wireshark/wireshark 2.0.0
wireshark/wireshark 2.0.1
Published May 01, 2016
Tracked Since Feb 18, 2026