Skip to content
OpenAdvisories
Unscored CVE-2016-9372 EUVD-2016-10182GHSA-j9pp-495j-qm96

In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was ad…

Published Nov 17, 2016 · Updated Aug 6, 2024 · Assigned by mitre

Description

In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was addressed in plugins/profinet/packet-pn-rtc-one.c by rejecting input with too many I/O objects.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 wireshark 2.2.2+g9c5aae3-1 —
Debian 13 wireshark 2.2.2+g9c5aae3-1 —
Debian 12 wireshark 2.2.2+g9c5aae3-1 —
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS wireshark 2.6.3-1~ubuntu18.04.1 —
Ubuntu 16.04 LTS wireshark 2.6.3-1~ubuntu16.04.1 —
Ubuntu 14.04 LTS wireshark 2.6.3-1~ubuntu14.04.1 —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed wireshark 2.2.2-1.1 openSUSE-SU-2024:10199-1

Advisories 1

References