CVE

Id
85995  
CVE No.
CVE-2015-8718  
Status
Candidate  
Description
Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Match MSG/RES packets for async NLM" option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted packet.  
Phase
Assigned (20160103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
756355 85995 CVE-2015-8718 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2015-37.html  View
756356 85995 CVE-2015-8718 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=81dfe6d450ada42d12f20ac26a6d8ae2302df37e  View
756357 85995 CVE-2015-8718 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
756358 85995 CVE-2015-8718 DEBIAN:DSA-3505  View
756359 85995 CVE-2015-8718 URL:http://www.debian.org/security/2016/dsa-3505  View
756360 85995 CVE-2015-8718 GENTOO:GLSA-201604-05  View
756361 85995 CVE-2015-8718 URL:https://security.gentoo.org/glsa/201604-05  View
756362 85995 CVE-2015-8718 BID:79814  View
756363 85995 CVE-2015-8718 URL:http://www.securityfocus.com/bid/79814  View
756364 85995 CVE-2015-8718 SECTRACK:1034551  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11566 JVNDB-2015-006886 Roundcube の program/include/rcmail_output_html.php の set_skin 関数におけるディレクトリトラバーサルの脆弱性 Roundcube の program/include/rcmail_output_html.php の set_skin 関数には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2015-8770 85995 6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006886.html  View