cve/2016/CVE-2016-4006.md

CVE-2016-4006

Description

epan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the protocol-tree depth, which allows remote attackers to cause a denial of service (stack memory consumption and application crash) via a crafted packet.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12268

Github

No PoCs found on GitHub currently.