CVE

Id
85997  
CVE No.
CVE-2015-8720  
Status
Candidate  
Description
The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.  
Phase
Assigned (20160103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
756376 85997 CVE-2015-8720 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2015-39.html  View
756377 85997 CVE-2015-8720 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=921bb07115fbffc081ec56a5022b4a9d58db6d39  View
756378 85997 CVE-2015-8720 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
756379 85997 CVE-2015-8720 DEBIAN:DSA-3505  View
756380 85997 CVE-2015-8720 URL:http://www.debian.org/security/2016/dsa-3505  View
756381 85997 CVE-2015-8720 GENTOO:GLSA-201604-05  View
756382 85997 CVE-2015-8720 URL:https://security.gentoo.org/glsa/201604-05  View
756383 85997 CVE-2015-8720 BID:79814  View
756384 85997 CVE-2015-8720 URL:http://www.securityfocus.com/bid/79814  View
756385 85997 CVE-2015-8720 SECTRACK:1034551  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11596 JVNDB-2015-006916 McAfee Total Protection の McAfee File Lock の McPvDrv.sys におけるカーネルメモリから重要な情報を取得される脆弱性 McAfee Total Protection の McAfee File Lock の McPvDrv.sys には、カーネルメモリから重要な情報を取得される、またはサービス運用妨害 (システムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-8772 85997 8.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006916.html  View