PT-2015-4723

CVE-2015-0564

·

Published

2015-01-09

·

Updated

2024-06-15

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.11 Wireshark versions 1.12.x through 1.12.2
Description The issue is related to a buffer underflow in the ssl decrypt record function, which can cause a denial of service (application crash) when a crafted packet is improperly handled during decryption of an SSL session.
Recommendations For Wireshark versions 1.10.x through 1.10.11, update to version 1.10.12 or later. For Wireshark versions 1.12.x through 1.12.2, update to version 1.12.3 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2015-1027
CESA-2015_1460
CESA-2015_2393
DLA-198-1
DSA-3141-1
MGASA-2015-0019
OPENSUSE-SU-2024:10199-1
RHSA-2015:1460
RHSA-2015_1460
RHSA-2015:2393
RHSA-2015_2393
SUSE-SU-2015:0307-1
SUSE-SU-2015:0426-1
SUSE-SU-2015:0653-1
SUSE-SU-2015:1098-1
Found an issue in the description? Have something to add? Feel free to write us 👾