CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-4078

The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote attackers to cause a denial of service (deep recursion and application crash) via a crafted packet, related to epan/dissectors/packet-capwap.c and epan/dissectors/packet-ieee80211.c.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 45.2%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2016-4078

Wireshark » Wireshark » Version: 1.12.0

cpe:2.3:a:wireshark:wireshark:1.12.0
Wireshark » Wireshark » Version: 1.12.1

cpe:2.3:a:wireshark:wireshark:1.12.1
Wireshark » Wireshark » Version: 1.12.10

cpe:2.3:a:wireshark:wireshark:1.12.10
Wireshark » Wireshark » Version: 1.12.2

cpe:2.3:a:wireshark:wireshark:1.12.2
Wireshark » Wireshark » Version: 1.12.3

cpe:2.3:a:wireshark:wireshark:1.12.3
Wireshark » Wireshark » Version: 1.12.4

cpe:2.3:a:wireshark:wireshark:1.12.4
Wireshark » Wireshark » Version: 1.12.5

cpe:2.3:a:wireshark:wireshark:1.12.5
Wireshark » Wireshark » Version: 1.12.6

cpe:2.3:a:wireshark:wireshark:1.12.6
Wireshark » Wireshark » Version: 1.12.7

cpe:2.3:a:wireshark:wireshark:1.12.7
Wireshark » Wireshark » Version: 1.12.8

cpe:2.3:a:wireshark:wireshark:1.12.8
Wireshark » Wireshark » Version: 1.12.9

cpe:2.3:a:wireshark:wireshark:1.12.9
Wireshark » Wireshark » Version: 2.0.0

cpe:2.3:a:wireshark:wireshark:2.0.0
Wireshark » Wireshark » Version: 2.0.1

cpe:2.3:a:wireshark:wireshark:2.0.1
Wireshark » Wireshark » Version: 2.0.2

cpe:2.3:a:wireshark:wireshark:2.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-4078

Products

Pricing

Contact Us