Vulnerability Details CVE-2016-4419
epan/dissectors/packet-spice.c in the SPICE dissector in Wireshark 2.x before 2.0.2 mishandles capability data, which allows remote attackers to cause a denial of service (large loop) via a crafted packet.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.4%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
Products affected by CVE-2016-4419
-
cpe:2.3:a:wireshark:wireshark:2.0.0
-
cpe:2.3:a:wireshark:wireshark:2.0.1