CVE-2016-9373

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings.

Metrics

CVSS 3.0 5.9/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2016/dsa-3719Third Party Advisory
http://www.securityfocus.com/bid/94369Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037313
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13072Issue Tracking
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cc8e37f0f53c4401bb1644a34eddea345940a8df
https://www.wireshark.org/security/wnpa-sec-2016-61.htmlVendor Advisory
http://www.debian.org/security/2016/dsa-3719Third Party Advisory
http://www.securityfocus.com/bid/94369Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037313
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13072Issue Tracking
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cc8e37f0f53c4401bb1644a34eddea345940a8df
https://www.wireshark.org/security/wnpa-sec-2016-61.htmlVendor Advisory

Timeline

Published: Nov 17, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-93745.9In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a CVE-2016-93755.9In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture CVE-2016-93765.9In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a CVE-2016-93775.5Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local CVE-2016-93785.5Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local CVE-2016-93797.9The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to r CVE-2016-93807.5The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to CVE-2016-93817.5Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka CVE-2016-93827.8Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cau CVE-2016-93838.8Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive infor CVE-2016-93846.5Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.CVE-2016-93856.0The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial