Candidate: CVE-2016-9375 PublicDate: 2016-11-17 05:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9375 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13097 https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=be6a10afc59f8182b9884d02f9857d547539fe8a https://www.wireshark.org/security/wnpa-sec-2016-62.html Description: In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H [5.9 MEDIUM] Patches_wireshark: upstream_wireshark: released (2.2.2, 2.0.8) precise_wireshark: ignored (reached end-of-life) precise/esm_wireshark: DNE (precise was needs-triage) trusty_wireshark: released (1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1) trusty/esm_wireshark: released (1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1) vivid/stable-phone-overlay_wireshark: DNE vivid/ubuntu-core_wireshark: DNE xenial_wireshark: released (2.2.6+g32dac6a-2ubuntu0.16.04) yakkety_wireshark: ignored (reached end-of-life) zesty_wireshark: ignored (reached end-of-life) artful_wireshark: not-affected (2.4.2-1) bionic_wireshark: not-affected devel_wireshark: not-affected