CVE

Id
86010  
CVE No.
CVE-2015-8733  
Status
Candidate  
Description
The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.  
Phase
Assigned (20160103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
756521 86010 CVE-2015-8733 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2015-51.html  View
756522 86010 CVE-2015-8733 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11827  View
756523 86010 CVE-2015-8733 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=53a3e53fce30523d11ab3df319fba7b75d63076f  View
756524 86010 CVE-2015-8733 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
756525 86010 CVE-2015-8733 DEBIAN:DSA-3505  View
756526 86010 CVE-2015-8733 URL:http://www.debian.org/security/2016/dsa-3505  View
756527 86010 CVE-2015-8733 GENTOO:GLSA-201604-05  View
756528 86010 CVE-2015-8733 URL:https://security.gentoo.org/glsa/201604-05  View
756529 86010 CVE-2015-8733 BID:79814  View
756530 86010 CVE-2015-8733 URL:http://www.securityfocus.com/bid/79814  View
756531 86010 CVE-2015-8733 SECTRACK:1034551  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11581 JVNDB-2015-006901 Linux Kernel の fs/fuse/file.c の fuse_fill_write_pages 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/fuse/file.c の fuse_fill_write_pages 関数には、サービス運用妨害 (無限ループ) 状態にされる脆弱性が存在します。 CVE-2015-8785 86010 4.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006901.html  View