cbcvebase.
CVE-2015-3811
published 2015-05-26

CVE-2015-3811: epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes…

medium5CVSS 3.1
AVNACLAuNCNINAP
epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, a different vulnerability than CVE-2015-2188.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
debianwireshark< wireshark 1.12.5+g5819e5b-1 (bookworm)wireshark 1.12.5+g5819e5b-1 (bookworm)
oraclelinux
oraclesolaris
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark>= 0 < 1.12.5+g5819e5b-11.12.5+g5819e5b-1
wiresharkwireshark>= 0 < 1.12.5+g5819e5b-11.12.5+g5819e5b-1
wiresharkwireshark>= 0 < 1.12.5+g5819e5b-11.12.5+g5819e5b-1

CVSS provenance

nvd5.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM