cve/2016/CVE-2016-2526.md

CVE-2016-2526

Description

epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data type, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.

POC

Reference

• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11983
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11983

Github

No PoCs found on GitHub currently.