CVE-2015-3815
published 2015-05-26CVE-2015-3815: The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload…
PriorityP422medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
2.57%
83.6th percentile
The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than CVE-2015-3906.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wireshark | < wireshark 1.12.5+g5819e5b-1 (bookworm) | wireshark 1.12.5+g5819e5b-1 (bookworm) |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 0 < 1.12.5+g5819e5b-1 | 1.12.5+g5819e5b-1 |
| wireshark | wireshark | >= 0 < 1.12.5+g5819e5b-1 | 1.12.5+g5819e5b-1 |
| wireshark | wireshark | >= 0 < 1.12.5+g5819e5b-1 | 1.12.5+g5819e5b-1 |
| wireshark | wireshark | >= 0 < 1.12.5+g5819e5b-1 | 1.12.5+g5819e5b-1 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
wireshark: Android Logcat file parser crash (wnpa-sec-2015-18)
vendor_redhat·2015-05-12·CVSS 5.0
CVE-2015-3815 [MEDIUM] wireshark: Android Logcat file parser crash (wnpa-sec-2015-18)
wireshark: Android Logcat file parser crash (wnpa-sec-2015-18)
The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than CVE-2015-3906.
Statement: This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 5, 6 and 7.
Package: wireshark (Red Hat Enterprise Linux 5) - Not affected
Package: wireshark (Red Hat Enterprise Linux 6) - Not affected
Package: wireshark (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2015-3906: wireshark - The logcat_dump_text function in wiretap/logcat.c in the Android Logcat file par...
vendor_debian·2015·CVSS 5.0
CVE-2015-3906 [MEDIUM] CVE-2015-3906: wireshark - The logcat_dump_text function in wiretap/logcat.c in the Android Logcat file par...
The logcat_dump_text function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not properly handle a lack of \0 termination, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted message in a packet, a different vulnerability than CVE-2015-3815.
Scope: local
bookworm: resolved (fixed in 1.12.5+g5819e5b-1)
bullseye: resolved (fixed in 1.12.5+g5819e5b-1)
forky: resolved (fixed in 1.12.5+g5819e5b-1)
sid: resolved (fixed in 1.12.5+g5819e5b-1)
trixie: resolved (fixed in 1.12.5+g5819e5b-1)
Debian
CVE-2015-3815: wireshark - The detect_version function in wiretap/logcat.c in the Android Logcat file parse...
vendor_debian·2015·CVSS 5.0
CVE-2015-3815 [MEDIUM] CVE-2015-3815: wireshark - The detect_version function in wiretap/logcat.c in the Android Logcat file parse...
The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than CVE-2015-3906.
Scope: local
bookworm: resolved (fixed in 1.12.5+g5819e5b-1)
bullseye: resolved (fixed in 1.12.5+g5819e5b-1)
forky: resolved (fixed in 1.12.5+g5819e5b-1)
sid: resolved (fixed in 1.12.5+g5819e5b-1)
trixie: resolved (fixed in 1.12.5+g5819e5b-1)
GHSA
GHSA-mf3q-r5cj-w985: The detect_version function in wiretap/logcat
ghsa_unreviewed·2022-05-17·CVSS 5.0
CVE-2015-3815 [MEDIUM] CWE-119 GHSA-mf3q-r5cj-w985: The detect_version function in wiretap/logcat
The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than CVE-2015-3906.
GHSA
GHSA-fx4j-jxfj-qvjh: The logcat_dump_text function in wiretap/logcat
ghsa_unreviewed·2022-05-17·CVSS 5.0
CVE-2015-3906 [MEDIUM] CWE-119 GHSA-fx4j-jxfj-qvjh: The logcat_dump_text function in wiretap/logcat
The logcat_dump_text function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not properly handle a lack of \0 termination, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted message in a packet, a different vulnerability than CVE-2015-3815.
OSV
CVE-2015-3906: The logcat_dump_text function in wiretap/logcat
osv·2015-05-26·CVSS 5.0
CVE-2015-3906 [MEDIUM] CVE-2015-3906: The logcat_dump_text function in wiretap/logcat
The logcat_dump_text function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not properly handle a lack of \0 termination, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted message in a packet, a different vulnerability than CVE-2015-3815.
OSV
CVE-2015-3815: The detect_version function in wiretap/logcat
osv·2015-05-26·CVSS 5.0
CVE-2015-3815 [MEDIUM] CVE-2015-3815: The detect_version function in wiretap/logcat
The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than CVE-2015-3906.
No detection rules found.
No public exploits indexed.
http://www.debian.org/security/2015/dsa-3277http://www.securityfocus.com/bid/74630http://www.wireshark.org/security/wnpa-sec-2015-18.htmlhttps://blog.fuzzing-project.org/11-Read-heap-overflow-invalid-memory-access-in-Wireshark-TFPA-0072015.htmlhttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11188https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b3b1f7c3aa2233a147294bad833b748d38fba84dhttps://security.gentoo.org/glsa/201510-03http://www.debian.org/security/2015/dsa-3277http://www.securityfocus.com/bid/74630http://www.wireshark.org/security/wnpa-sec-2015-18.htmlhttps://blog.fuzzing-project.org/11-Read-heap-overflow-invalid-memory-access-in-Wireshark-TFPA-0072015.htmlhttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11188https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b3b1f7c3aa2233a147294bad833b748d38fba84dhttps://security.gentoo.org/glsa/201510-03
2015-05-26
Published