CVE-2015-3812
published 2015-05-26CVE-2015-3812: Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x…
PriorityP336high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
3.73%
88.7th percentile
Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers to cause a denial of service (memory consumption) via a crafted packet.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wireshark | < wireshark 1.12.5+g5819e5b-1 (bookworm) | wireshark 1.12.5+g5819e5b-1 (bookworm) |
| oracle | linux | — | — |
| oracle | solaris | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 0 < 1.12.5+g5819e5b-1 | 1.12.5+g5819e5b-1 |
| wireshark | wireshark | >= 0 < 1.12.5+g5819e5b-1 | 1.12.5+g5819e5b-1 |
| wireshark | wireshark | >= 0 < 1.12.5+g5819e5b-1 | 1.12.5+g5819e5b-1 |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g66v-ghww-g5gw: Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11
ghsa_unreviewed·2022-05-13
CVE-2015-3812 [HIGH] GHSA-g66v-ghww-g5gw: Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11
Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers to cause a denial of service (memory consumption) via a crafted packet.
OSV
CVE-2015-3812: Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11
osv·2015-05-26·CVSS 7.8
CVE-2015-3812 [HIGH] CVE-2015-3812: Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11
Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers to cause a denial of service (memory consumption) via a crafted packet.
Red Hat
wireshark: X11 memory leak (wnpa-sec-2015-15)
vendor_redhat·2015-05-12·CVSS 7.8
CVE-2015-3812 [HIGH] CWE-401 wireshark: X11 memory leak (wnpa-sec-2015-15)
wireshark: X11 memory leak (wnpa-sec-2015-15)
Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers to cause a denial of service (memory consumption) via a crafted packet.
A flaw was found in X11 dissector of wireshark of which an attacker could make wireshark consume excessive CPU resources which could make system unresponsive by injecting specially crafted packet onto the wire or by convincing wireshark user to read malformed packet trace file.
Mitigation: This flaw can be mitigated in wireshark by disabling the X11 protocol dissector. In wireshark GUI application click on Analyze->Enabled Protocols and search for "X11" and disable in. When using "t
Debian
CVE-2015-3812: wireshark - Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packe...
vendor_debian·2015·CVSS 7.8
CVE-2015-3812 [HIGH] CVE-2015-3812: wireshark - Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packe...
Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers to cause a denial of service (memory consumption) via a crafted packet.
Scope: local
bookworm: resolved (fixed in 1.12.5+g5819e5b-1)
bullseye: resolved (fixed in 1.12.5+g5819e5b-1)
forky: resolved (fixed in 1.12.5+g5819e5b-1)
sid: resolved (fixed in 1.12.5+g5819e5b-1)
trixie: resolved (fixed in 1.12.5+g5819e5b-1)
No detection rules found.
No public exploits indexed.
http://rhn.redhat.com/errata/RHSA-2017-0631.htmlhttp://www.debian.org/security/2015/dsa-3277http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.htmlhttp://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlhttp://www.securityfocus.com/bid/74637http://www.wireshark.org/security/wnpa-sec-2015-15.htmlhttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11088https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b8ccc2a6add29823a0ff0492fc50372449007e7bhttps://security.gentoo.org/glsa/201510-03http://rhn.redhat.com/errata/RHSA-2017-0631.htmlhttp://www.debian.org/security/2015/dsa-3277http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.htmlhttp://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlhttp://www.securityfocus.com/bid/74637http://www.wireshark.org/security/wnpa-sec-2015-15.htmlhttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11088https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b8ccc2a6add29823a0ff0492fc50372449007e7bhttps://security.gentoo.org/glsa/201510-03
2015-05-26
Published