NVD

Id
28795  
Name
CVE-2015-8733  
Description
The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-01-04  
Modified Date
2016-12-07  
Seq
2015-8733  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151611 28795 CVE-2015-8733 DSA-3505  View
151612 28795 CVE-2015-8733 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
151613 28795 CVE-2015-8733 79814  View
151614 28795 CVE-2015-8733 1034551  View
151615 28795 CVE-2015-8733 http://www.wireshark.org/security/wnpa-sec-2015-51.html  View
151616 28795 CVE-2015-8733 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11827  View
151617 28795 CVE-2015-8733 https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=53a3e53fce30523d11ab3df319fba7b75d63076f  View
151618 28795 CVE-2015-8733 GLSA-201604-05  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11318 JVNDB-2015-006638 Wireshark の Sniffer ファイルパーサの wiretap/ngsniffer.c の ngsniffer_process_record 関数におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の Sniffer ファイルパーサの wiretap/ngsniffer.c の ngsniffer_process_record 関数は、レコードの長さとレコードヘッダの長さの関係を検証しないため、サービス運用妨害 (out-of-bounds read およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-8733 85958 CVE-2015-8733 28795 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006638.html 2015-12-29 2016-01-07 View