Wireshark Android Logcat File Parser CVE-2015-3815 Denial of Service Vulnerability

Bugtraq ID:	74630
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-3815
Remote:	Yes
Local:	No
Published:	May 12 2015 12:00AM
Updated:	Dec 08 2015 10:03PM
Credit:	Hanno Böck
Vulnerable:	Wireshark Wireshark 1.12.3 Wireshark Wireshark 1.12.2 Wireshark Wireshark 1.12.1 Wireshark Wireshark 1.12 Wireshark Wireshark 1.12.4 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	Wireshark Wireshark 1.12.5

Wireshark Android Logcat File Parser CVE-2015-3815 Denial of Service Vulnerability

Wireshark is prone to a remote denial-of-service vulnerability.

An attacker can leverage this issue to crash the affected application, denying service to legitimate users.

Wireshark 1.12.0 through 1.12.4 are vulnerable.

Wireshark Android Logcat File Parser CVE-2015-3815 Denial of Service Vulnerability

A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.

Wireshark Android Logcat File Parser CVE-2015-3815 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Wireshark Android Logcat File Parser CVE-2015-3815 Denial of Service Vulnerability

References:

• logcat: improve (crash) robustness, improve names (Wireshark)
  
• Wireshark Homepage (Wireshark)
  
• Wireshark Bug Database �?? Bug 11188 (Wireshark)
  
• wnpa-sec-2015-18 · Android Logcat file parser crash (wireshark)