NVD

Id
28785  
Name
CVE-2015-8723  
Description
The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-01-04  
Modified Date
2016-12-07  
Seq
2015-8723  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151529 28785 CVE-2015-8723 DSA-3505  View
151530 28785 CVE-2015-8723 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
151531 28785 CVE-2015-8723 79382  View
151532 28785 CVE-2015-8723 1034551  View
151533 28785 CVE-2015-8723 http://www.wireshark.org/security/wnpa-sec-2015-42.html  View
151534 28785 CVE-2015-8723 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11790  View
151535 28785 CVE-2015-8723 https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=40b283181c63cb28bc6f58d80315eccca6650da0  View
151536 28785 CVE-2015-8723 GLSA-201604-05  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11308 JVNDB-2015-006628 Wireshark の 802.11 ディセクタの epan/crypt/airpdcap.c 内の AirPDcapPacketProcess 関数におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の 802.11 ディセクタ (解析機能) の epan/crypt/airpdcap.c 内の AirPDcapPacketProcess 関数は、パケット長 (Total length) とキャプチャ長 (capture length) の関係を検証しないため、サービス運用妨害 (スタックベースのバッファオーバーフローおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-8723 85948 CVE-2015-8723 28785 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006628.html 2015-12-29 2016-01-07 View