CVE

Id
86003  
CVE No.
CVE-2015-8726  
Status
Candidate  
Description
wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme (MCS) data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.  
Phase
Assigned (20160103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
756441 86003 CVE-2015-8726 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2015-44.html  View
756442 86003 CVE-2015-8726 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11789  View
756443 86003 CVE-2015-8726 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11791  View
756444 86003 CVE-2015-8726 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=185911de7d337246044c8e99da2f5b4bac74c0d5  View
756445 86003 CVE-2015-8726 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b8fa3d463c1bdd9b84c897441e7a5c8ad1f0f292  View
756446 86003 CVE-2015-8726 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
756447 86003 CVE-2015-8726 DEBIAN:DSA-3505  View
756448 86003 CVE-2015-8726 URL:http://www.debian.org/security/2016/dsa-3505  View
756449 86003 CVE-2015-8726 GENTOO:GLSA-201604-05  View
756450 86003 CVE-2015-8726 URL:https://security.gentoo.org/glsa/201604-05  View
756451 86003 CVE-2015-8726 BID:79382  View
756452 86003 CVE-2015-8726 URL:http://www.securityfocus.com/bid/79382  View
756453 86003 CVE-2015-8726 SECTRACK:1034551  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11774 JVNDB-2015-007094 GNU C Library における整数オーバーフローの脆弱性 GNU C Library (別名 glibc または libc6) には、整数オーバーフローの脆弱性が存在します。 CVE-2015-8778 86003 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007094.html  View