cbcvebase.
CVE-2015-0564
published 2015-01-10

CVE-2015-0564: Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows…

medium5CVSS 3.1
AVNACLAuNCNINAP
Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
debiandebian_linux
debiandebian_linux
debianwireshark< wireshark 1.12.1+g01b65bf-3 (bookworm)wireshark 1.12.1+g01b65bf-3 (bookworm)
opensuseopensuse
opensuseopensuse
oraclelinux
oraclesolaris
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark>= 0 < 1.12.1+g01b65bf-31.12.1+g01b65bf-3
wiresharkwireshark>= 0 < 1.12.1+g01b65bf-31.12.1+g01b65bf-3
wiresharkwireshark>= 0 < 1.12.1+g01b65bf-31.12.1+g01b65bf-3

CVSS provenance

nvd5.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM