cbcvebase.
CVE-2015-6246
published 2015-08-24

CVE-2015-6246: The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values…

medium4.3CVSS 3.1
AVNACMAuNCNINAP
The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Affected

14 ranges
VendorProductVersion rangeFixed in
debianwireshark< wireshark 1.12.7+g7fc8978-1 (bookworm)wireshark 1.12.7+g7fc8978-1 (bookworm)
oraclelinux
oraclesolaris
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark
wiresharkwireshark>= 0 < 1.12.7+g7fc8978-11.12.7+g7fc8978-1
wiresharkwireshark>= 0 < 1.12.7+g7fc8978-11.12.7+g7fc8978-1
wiresharkwireshark>= 0 < 1.12.7+g7fc8978-11.12.7+g7fc8978-1
wiresharkwireshark>= 0 < 1.12.7+g7fc8978-11.12.7+g7fc8978-1

CVSS provenance

nvd4.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv4.3MEDIUM