Wireshark NCP parser DoS Vulnerability (CVE-2016-4085)

Wireshark NCP parser DoS Vulnerability (CVE-2016-4085)
Wireshark NCP parser DoS Vulnerability (CVE-2016-4085)

Release date:
Updated on:

Affected Systems:

Wireshark 1.12.x <1.12.11

Description:

CVE (CAN) ID: CVE-2016-4085

Wireshark is the most popular network protocol parser.

Wireshark 1.12.x <1.12.11, NCP parser epan/dissectors/packet-ncp2222.inc has Stack Buffer Overflow Vulnerability. A long data packet string allows remote attackers to cause DoS attacks.

<* Source: Chris Benedict
*>

Suggestion:

Vendor patch:

Wireshark
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://www.wireshark.org/security/wnpa-sec-2016-28.html

Install Wireshark in Ubuntu 13.10

Simple use of Wireshark

Install Wireshark in Ubuntu 12.04

Starting Wireshark packet capture from common users in Linux

Install and run Wireshark in Linux

Wireshark details: click here
Wireshark: click here

This article permanently updates the link address: