CVE-2015-2189

EUVD-2015-2296
Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via an invalid Interface Statistics Block (ISB) interface ID in a crafted packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Affected Products (NVD)
VendorProductVersion
wiresharkwireshark
1.10.0
wiresharkwireshark
1.10.1
wiresharkwireshark
1.10.2
wiresharkwireshark
1.10.3
wiresharkwireshark
1.10.4
wiresharkwireshark
1.10.5
wiresharkwireshark
1.10.6
wiresharkwireshark
1.10.7
wiresharkwireshark
1.10.8
wiresharkwireshark
1.10.9
wiresharkwireshark
1.10.10
wiresharkwireshark
1.10.11
wiresharkwireshark
1.10.12
wiresharkwireshark
1.12.0
wiresharkwireshark
1.12.1
wiresharkwireshark
1.12.2
wiresharkwireshark
1.12.3
oraclesolaris
11.2
opensuseopensuse
13.1
opensuseopensuse
13.2
debiandebian_linux
7.0
debiandebian_linux
8.0
mageiamageia
4.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
wireshark
bookworm
4.0.11-1~deb12u1
fixed
bookworm (security)
4.0.11-1~deb12u1
fixed
bullseye
3.4.10-0+deb11u1
fixed
bullseye (security)
3.4.16-0+deb11u1
fixed
sid
4.4.1-1
fixed
squeeze
not-affected
trixie
4.4.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wireshark
artful
Fixed 1.12.1+g01b65bf-4
released
bionic
Fixed 2.6.3-1~ubuntu18.04.1
released
lucid
not-affected
precise
not-affected
trusty
Fixed 2.6.3-1~ubuntu14.04.1
released
utopic
Fixed 1.12.1+g01b65bf-2ubuntu14.10.3
released
vivid
Fixed 1.12.1+g01b65bf-4
released
wily
Fixed 1.12.1+g01b65bf-4
released
xenial
Fixed 2.6.3-1~ubuntu16.04.1
released
yakkety
Fixed 1.12.1+g01b65bf-4
released
zesty
Fixed 1.12.1+g01b65bf-4
released
Common Weakness Enumeration
References