CVE

Id
86001  
CVE No.
CVE-2015-8724  
Status
Candidate  
Description
The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not verify the WPA broadcast key length, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.  
Phase
Assigned (20160103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
756420 86001 CVE-2015-8724 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2015-42.html  View
756421 86001 CVE-2015-8724 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11826  View
756422 86001 CVE-2015-8724 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=83f2818118ae255db949bb3a4b3a26ebd1c5f7c5  View
756423 86001 CVE-2015-8724 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
756424 86001 CVE-2015-8724 DEBIAN:DSA-3505  View
756425 86001 CVE-2015-8724 URL:http://www.debian.org/security/2016/dsa-3505  View
756426 86001 CVE-2015-8724 GENTOO:GLSA-201604-05  View
756427 86001 CVE-2015-8724 URL:https://security.gentoo.org/glsa/201604-05  View
756428 86001 CVE-2015-8724 BID:79382  View
756429 86001 CVE-2015-8724 URL:http://www.securityfocus.com/bid/79382  View
756430 86001 CVE-2015-8724 SECTRACK:1034551  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11773 JVNDB-2015-007093 GNU C Library の strftime 関数におけるサービス運用妨害 (DoS) の脆弱性 GNU C Library (別名 glibc または libc6) の strftime 関数には、サービス運用妨害 (アプリケーションクラッシュ) 状態にされる、または重要な情報を取得される脆弱性が存在します。 CVE-2015-8776 86001 6.4 9.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007093.html  View