CVE-2016-7180

epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet.

• CWE-416

• http://www.debian.org/security/2016/dsa-3671Third Party Advisory
• http://www.securitytracker.com/id/1036760Third Party Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12782Issue Tracking
• https://code.wireshark.org/review/17289Issue Tracking, Patch
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5213496250aceff086404c568e3718ebc0060934
• https://www.wireshark.org/security/wnpa-sec-2016-55.htmlVendor Advisory
• http://www.debian.org/security/2016/dsa-3671Third Party Advisory
• http://www.securitytracker.com/id/1036760Third Party Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12782Issue Tracking
• https://code.wireshark.org/review/17289Issue Tracking, Patch
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5213496250aceff086404c568e3718ebc0060934
• https://www.wireshark.org/security/wnpa-sec-2016-55.htmlVendor Advisory

Published

Sep 9, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7172NetApp Snap Creator Framework before 4.3.1 discloses sensiti…
• CVE-2016-7175epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in…
• CVE-2016-7176epan/dissectors/packet-h225.c in the H.225 dissector in Wire…
• CVE-2016-7177epan/dissectors/packet-catapult-dct2000.c in the Catapult DC…
• CVE-2016-7178epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in…
• CVE-2016-7179Stack-based buffer overflow in epan/dissectors/packet-catapu…
• CVE-2016-7181Microsoft Edge allows remote attackers to execute arbitrary …
• CVE-2016-7182The Graphics component in Microsoft Windows Vista SP2; Windo…
• CVE-2016-7183Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7184The Common Log File System (CLFS) driver in Microsoft Window…
• CVE-2016-7185The kernel-mode drivers in Microsoft Windows Vista SP2, Wind…
• CVE-2016-7186Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…