Debian/wireshark: medium 5.9
The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows
Action: Upgrade wireshark to 2.0.2+ga16e22e-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.2+ga16e22e-1 | - |
Fixed versions
| 2.0.2+ga16e22e-1 |
Sources
- osv: DEBIAN-CVE-2016-2522#Debian:13/wireshark
- https://security-tracker.debian.org/tracker/CVE-2016-2522
published · modified · JSON