The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Aug 30, 2017 | Jan 4, 2016 |
| Debian | — | Upgrade wireshark | Mar 8, 2016 | Jan 4, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 24, 2016 |
| Gentoo Linux | — | Upgrade net-analyzer/wireshark. | Oct 30, 2017 | Jan 4, 2016 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark to version 1.12.9-0.175.3.5.0.4.0 on Solaris 11.3Upgrade diagnostic/wireshark/wireshark-common to version 1.12.9-0.175.3.5.0.4.0 on Solaris 11.3Upgrade diagnostic/wireshark/tshark to version 1.12.9-0.175.3.5.0.4.0 on Solaris 11.3 | May 29, 2017 | Jan 4, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 29, 2015 |
| Suse | — | Upgrade libwiretap7Upgrade libwsutil8Upgrade libwsutil7Upgrade libwiretap6Upgrade libwireshark8Upgrade libwsutil11Upgrade libwiretap10Upgrade libwireshark13Upgrade wireshark-gtkUpgrade libwireshark9Upgrade wireshark-develUpgrade wiresharkUpgrade wireshark-ui-qtUpgrade libwscodecs1 | Feb 2, 2016 | Jan 4, 2016 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Jan 4, 2016 |
| Wireshark | — | Upgrade to Wireshark version 1.12.9Upgrade to Wireshark version 2.0.1 | Oct 4, 2017 | Jan 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub