CVE

Id
81928  
CVE No.
CVE-2015-4651  
Status
Candidate  
Description
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not properly determine whether enough memory is available for storing IP address strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.  
Phase
Assigned (20150618)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
735288 81928 CVE-2015-4651 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2015-19.html  View
735289 81928 CVE-2015-4651 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11153  View
735290 81928 CVE-2015-4651 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=524ed1df6e6126cd63ba419ccb82c83636d77ee4  View
735291 81928 CVE-2015-4651 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
735292 81928 CVE-2015-4651 DEBIAN:DSA-3294  View
735293 81928 CVE-2015-4651 URL:http://www.debian.org/security/2015/dsa-3294  View
735294 81928 CVE-2015-4651 SUSE:openSUSE-SU-2015:1215  View
735295 81928 CVE-2015-4651 URL:http://lists.opensuse.org/opensuse-updates/2015-07/msg00020.html  View
735296 81928 CVE-2015-4651 BID:75317  View
735297 81928 CVE-2015-4651 URL:http://www.securityfocus.com/bid/75317  View
735298 81928 CVE-2015-4651 SECTRACK:1032662  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11475 JVNDB-2015-006795 WordPress 用 WordPress Rename プラグインの mysqldump_download.php における絶対パストラバーサルの脆弱性 WordPress 用 WordPress Rename プラグインの mysqldump_download.php には、絶対パストラバーサルの脆弱性が存在します。 CVE-2015-4703 81928 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006795.html  View