CVE-2015-0561

EUVD-2015-0574
asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a certain index value, which allows remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
Affected Products (NVD)
VendorProductVersion
wiresharkwireshark
1.10.0
wiresharkwireshark
1.10.1
wiresharkwireshark
1.10.2
wiresharkwireshark
1.10.3
wiresharkwireshark
1.10.4
wiresharkwireshark
1.10.5
wiresharkwireshark
1.10.6
wiresharkwireshark
1.10.7
wiresharkwireshark
1.10.8
wiresharkwireshark
1.10.9
wiresharkwireshark
1.10.10
wiresharkwireshark
1.10.11
wiresharkwireshark
1.12.0
wiresharkwireshark
1.12.1
wiresharkwireshark
1.12.2
opensuseopensuse
13.1
opensuseopensuse
13.2
oraclesolaris
11.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
wireshark
bookworm
4.0.11-1~deb12u1
fixed
bookworm (security)
4.0.11-1~deb12u1
fixed
bullseye
3.4.10-0+deb11u1
fixed
bullseye (security)
3.4.16-0+deb11u1
fixed
sid
4.4.1-1
fixed
squeeze
not-affected
trixie
4.4.0-1
fixed
wheezy
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wireshark
artful
Fixed 1.12.1+g01b65bf-3
released
bionic
Fixed 2.6.3-1~ubuntu18.04.1
released
lucid
ignored
precise
ignored
trusty
Fixed 2.6.3-1~ubuntu14.04.1
released
utopic
Fixed 1.12.1+g01b65bf-2~ubuntu14.10.2
released
vivid
Fixed 1.12.1+g01b65bf-3
released
wily
Fixed 1.12.1+g01b65bf-3
released
xenial
Fixed 2.6.3-1~ubuntu16.04.1
released
yakkety
Fixed 1.12.1+g01b65bf-3
released
zesty
Fixed 1.12.1+g01b65bf-3
released