Back to search
CVE-2015-7830
Published: Nov 15, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
The pcapng_read_if_descr_block function in wiretap/pcapng.c in the pcapng parser in Wireshark 1.12.x before 1.12.8 uses too many levels of pointer indirection, which allows remote attackers to cause a denial of service (incorrect free and application crash) via a crafted packet that triggers interface-filter copying.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
77101
vdb-entry
x_refsource_BID
78723
vdb-entry
x_refsource_BID
DSA-3505
vendor-advisory
x_refsource_DEBIAN
1033953
vdb-entry
x_refsource_SECTRACK
http://www.wireshark.org/security/wnpa-sec-2015-30.html
x_refsource_CONFIRM
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11455
x_refsource_CONFIRM
openSUSE-SU-2015:1836
vendor-advisory
x_refsource_SUSE
http://www.zerodayinitiative.com/advisories/ZDI-15-624
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now