NVD

Id
28788  
Name
CVE-2015-8726  
Description
wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme (MCS) data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-01-04  
Modified Date
2016-12-07  
Seq
2015-8726  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151552 28788 CVE-2015-8726 DSA-3505  View
151553 28788 CVE-2015-8726 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
151554 28788 CVE-2015-8726 79382  View
151555 28788 CVE-2015-8726 1034551  View
151556 28788 CVE-2015-8726 http://www.wireshark.org/security/wnpa-sec-2015-44.html  View
151557 28788 CVE-2015-8726 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11789  View
151558 28788 CVE-2015-8726 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11791  View
151559 28788 CVE-2015-8726 https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=185911de7d337246044c8e99da2f5b4bac74c0d5  View
151560 28788 CVE-2015-8726 https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b8fa3d463c1bdd9b84c897441e7a5c8ad1f0f292  View
151561 28788 CVE-2015-8726 GLSA-201604-05  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11311 JVNDB-2015-006631 Wireshark の VeriWave ファイルパーサの wiretap/vwr.c におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の VeriWave ファイルパーサの wiretap/vwr.c は、特定の署名および Modulation and Coding Scheme (MCS) データを検証しないため、サービス運用妨害 (out-of-bounds read およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-8726 85951 CVE-2015-8726 28788 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006631.html 2015-12-29 2016-01-07 View