epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Aug 30, 2017 | Sep 9, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 9, 2016 |
| Debian | — | Upgrade wireshark | Sep 21, 2016 | Sep 9, 2016 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark to version 2.2.1-0.175.3.14.0.4.0 on Solaris 11.3Upgrade diagnostic/wireshark/tshark to version 2.2.1-0.175.3.14.0.4.0 on Solaris 11.3Upgrade diagnostic/wireshark/wireshark-common to version 2.2.1-0.175.3.14.0.4.0 on Solaris 11.3 | May 29, 2017 | Sep 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 8, 2016 |
| Suse | — | Upgrade libwsutil11Upgrade libwireshark13Upgrade wiresharkUpgrade libwsutil7Upgrade libwsutil8Upgrade libwscodecs1Upgrade libwireshark9Upgrade wireshark-develUpgrade libwiretap6Upgrade libwiretap10Upgrade libwireshark8Upgrade wireshark-gtkUpgrade wireshark-ui-qtUpgrade libwiretap7 | Dec 9, 2016 | Sep 9, 2016 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Sep 9, 2016 |
| Wireshark | — | Upgrade to Wireshark version 2.0.6 | Oct 4, 2017 | Sep 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub