In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Aug 30, 2017 | Apr 12, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 17, 2016 |
| Debian | — | Upgrade wireshark | Nov 21, 2016 | Nov 17, 2016 |
| Freebsd | — | Upgrade wiresharkUpgrade wireshark-qt5Upgrade tshark-liteUpgrade wireshark-liteUpgrade tshark | Dec 1, 2016 | Dec 1, 2016 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark/tshark to version 2.2.2-0.175.3.16.0.2.0 on Solaris 11.3Upgrade diagnostic/wireshark/wireshark-common to version 2.2.2-0.175.3.16.0.2.0 on Solaris 11.3Upgrade diagnostic/wireshark to version 2.2.2-0.175.3.16.0.2.0 on Solaris 11.3 | May 29, 2017 | Nov 17, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 16, 2016 |
| Suse | — | Upgrade libwsutil8Upgrade libwscodecs1Upgrade libwireshark9Upgrade libwireshark8Upgrade wireshark-ui-qtUpgrade wireshark-gtkUpgrade libwiretap6Upgrade libwiretap10Upgrade wireshark-develUpgrade wiresharkUpgrade libwiretap7Upgrade libwsutil7Upgrade libwireshark13Upgrade libwsutil11 | Nov 28, 2016 | Nov 17, 2016 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Nov 17, 2016 |
| Wireshark | — | Upgrade to Wireshark version 2.0.8Upgrade to Wireshark version 2.2.2 | Oct 4, 2017 | Nov 17, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub