The pcapng_read_if_descr_block function in wiretap/pcapng.c in the pcapng parser in Wireshark 1.12.x before 1.12.8 uses too many levels of pointer indirection, which allows remote attackers to cause a denial of service (incorrect free and application crash) via a crafted packet that triggers interface-filter copying.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
07 Nov 2023, 02:28
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2015-11-15 03:59
Updated : 2023-11-07 02:28
NVD link : CVE-2015-7830
Mitre link : CVE-2015-7830
JSON object : View
Products Affected
oracle
- solaris
wireshark
- wireshark
CWE
CWE-20
Improper Input Validation