Wireshark Websocket Dissector CVE-2015-3810 Denial of Service Vulnerability

Bugtraq ID:	74629
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-3810
Remote:	Yes
Local:	No
Published:	May 12 2015 12:00AM
Updated:	Feb 02 2016 08:08PM
Credit:	Peter Wu
Vulnerable:	Oracle Linux 0 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Wireshark Websocket Dissector CVE-2015-3810 Denial of Service Vulnerability

Wireshark is prone to a denial-of-service vulnerability.

Successful exploitation of the issue will cause excessive CPU resource consumption, resulting in a denial-of-service condition.

Wireshark versions 1.12.0 through 1.12.4 are vulnerable.

Wireshark Websocket Dissector CVE-2015-3810 Denial of Service Vulnerability

A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.
[email protected]

Wireshark Websocket Dissector CVE-2015-3810 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Wireshark Websocket Dissector CVE-2015-3810 Denial of Service Vulnerability

References:

• Wireshark Homepage (Wireshark)