Wireshark CVE-2015-3813 Remote Denial of Service Vulnerability

Bugtraq ID:	74633
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-3813
Remote:	Yes
Local:	No
Published:	May 12 2015 12:00AM
Updated:	Feb 02 2016 08:08PM
Credit:	The vendor reported this issue.
Vulnerable:	Wireshark Wireshark 1.12.3 Wireshark Wireshark 1.12.2 Wireshark Wireshark 1.12.1 Wireshark Wireshark 1.12 Wireshark Wireshark 1.12.4 Redhat Enterprise Linux Workstation 7 Redhat Enterprise Linux Server 7 Redhat Enterprise Linux Desktop 7 Oracle Linux 0 Oracle Enterprise Linux 7 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	Wireshark Wireshark 1.12.5

Wireshark CVE-2015-3813 Remote Denial of Service Vulnerability

Wireshark is prone to a remote denial-of-service vulnerability.

An attacker can leverage this issue to crash the affected application, denying service to legitimate users.

Wireshark 1.12.0 through 1.12.4 are vulnerable.

Wireshark CVE-2015-3813 Remote Denial of Service Vulnerability

A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.

Wireshark CVE-2015-3813 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Wireshark CVE-2015-3813 Remote Denial of Service Vulnerability

References:

• Buildbot crash output: fuzz-2015-04-19-5769.pcap (Wireshark)
  
• Wireshark Homepage (Wireshark)
  
• wnpa-sec-2015-16 · Reassembly memory leak (Wireshark)
  
• Ref: linuxbulletinoct2015-2719645 Oracle Linux Bulletin - October 2015 Revision (Oracle)
  
• RHSA-2015:2393-1: wireshark security, bug fix, and enhancement update (Red Hat)