wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Aug 30, 2017 | Aug 7, 2016 |
| Debian | — | Upgrade wireshark | Jul 4, 2016 | Jul 2, 2016 |
| Freebsd | — | Upgrade wireshark-qt5Upgrade wiresharkUpgrade tsharkUpgrade wireshark-liteUpgrade tshark-lite | Dec 10, 2025 | Jul 4, 2016 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark/wireshark-common to version 2.0.4-0.175.3.11.0.4.0 on Solaris 11.3Upgrade diagnostic/wireshark to version 2.0.4-0.175.3.11.0.4.0 on Solaris 11.3Upgrade diagnostic/wireshark/tshark to version 2.0.4-0.175.3.11.0.4.0 on Solaris 11.3 | May 29, 2017 | Aug 7, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 7, 2016 |
| Suse | — | Upgrade libwireshark13Upgrade libwscodecs1Upgrade libwiretap6Upgrade libwsutil7Upgrade wiresharkUpgrade wireshark-develUpgrade libwiretap7Upgrade libwsutil8Upgrade wireshark-gtkUpgrade libwiretap10Upgrade libwsutil11Upgrade libwireshark8Upgrade libwireshark9Upgrade wireshark-ui-qt | Aug 7, 2016 | Aug 7, 2016 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Aug 7, 2016 |
| Wireshark | — | Upgrade to Wireshark version 2.0.4Upgrade to Wireshark version 1.12.12 | Oct 4, 2017 | Aug 7, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub