CVE

Id
86002  
CVE No.
CVE-2015-8725  
Status
Candidate  
Description
The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.  
Phase
Assigned (20160103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
756431 86002 CVE-2015-8725 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2015-43.html  View
756432 86002 CVE-2015-8725 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11792  View
756433 86002 CVE-2015-8725 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=aaa28a9d39158ca1033bbd3372cf423abbf4f202  View
756434 86002 CVE-2015-8725 DEBIAN:DSA-3505  View
756435 86002 CVE-2015-8725 URL:http://www.debian.org/security/2016/dsa-3505  View
756436 86002 CVE-2015-8725 GENTOO:GLSA-201604-05  View
756437 86002 CVE-2015-8725 URL:https://security.gentoo.org/glsa/201604-05  View
756438 86002 CVE-2015-8725 BID:79382  View
756439 86002 CVE-2015-8725 URL:http://www.securityfocus.com/bid/79382  View
756440 86002 CVE-2015-8725 SECTRACK:1034551  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11500 JVNDB-2015-006820 GNU C Library の elf/rtld.c の process_envvars 関数におけるポインタガード (pointer-guarding) 保護メカニズムを回避される脆弱性 GNU C Library (別名 glibc または libc6) の elf/rtld.c の process_envvars 関数には、ポインタガード (pointer-guarding) 保護メカニズムを回避される脆弱性が存在します。 CVE-2015-8777 86002 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006820.html  View