PT-2015-7130

CVE-2015-6241

·

Published

2015-08-11

·

Updated

2024-06-15

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.6
Description The issue is related to the proto tree add bytes item function in the protocol-tree implementation. It does not properly terminate a data structure after a failure to locate a number within a string. This allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted packet.
Recommendations For Wireshark versions 1.12.x through 1.12.6, update to version 1.12.7 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2015-1883
DSA-3367-1
OPENSUSE-SU-2024:10199-1
SUSE-SU-2015:1676-1
SUSE-SU-2015:1676-2
SUSE-SU-2015:1713-1
Found an issue in the description? Have something to add? Feel free to write us 👾