CVE

Id
86009  
CVE No.
CVE-2015-8732  
Status
Candidate  
Description
The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the Total Profile Number field, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.  
Phase
Assigned (20160103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
756509 86009 CVE-2015-8732 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2015-50.html  View
756510 86009 CVE-2015-8732 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11830  View
756511 86009 CVE-2015-8732 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9352616ec9742f2ed3d2802d0c8c100d51ca410b  View
756512 86009 CVE-2015-8732 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=eb0c034f6e4cdbf5ae36dd9ba8e2743630b7bd38  View
756513 86009 CVE-2015-8732 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
756514 86009 CVE-2015-8732 DEBIAN:DSA-3505  View
756515 86009 CVE-2015-8732 URL:http://www.debian.org/security/2016/dsa-3505  View
756516 86009 CVE-2015-8732 GENTOO:GLSA-201604-05  View
756517 86009 CVE-2015-8732 URL:https://security.gentoo.org/glsa/201604-05  View
756518 86009 CVE-2015-8732 BID:79382  View
756519 86009 CVE-2015-8732 URL:http://www.securityfocus.com/bid/79382  View
756520 86009 CVE-2015-8732 SECTRACK:1034551  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11743 JVNDB-2015-007063 LibTIFF の tif_next.c の NeXTDecode 関数におけるサービス運用妨害 (DoS) の脆弱性 LibTIFF の tif_next.c の NeXTDecode 関数には、サービス運用妨害 (境界外書き込み) 状態にされる脆弱性が存在します。 CVE-2015-8784 86009 4.3 6.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007063.html  View