Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2015-8726

Date: January 3, 2016

wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme (MCS) data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.

Language: C

Severity Score

Related Resources (15)

http://www.debian.org/security/2016/dsa-3505
http://www.wireshark.org/security/wnpa-sec-2015-44.html
https://access.redhat.com/security/cve/CVE-2015-8726
https://security-tracker.debian.org/tracker/CVE-2015-8726
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11791
https://nvd.nist.gov/vuln/detail/CVE-2015-8726
http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
https://people.canonical.com/~ubuntu-security/cve/CVE-2015-8726
http://www.securitytracker.com/id/1034551
http://www.securityfocus.com/bid/79382
https://security.gentoo.org/glsa/201604-05
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=185911de7d337246044c8e99da2f5b4bac74c0d5
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11789
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b8fa3d463c1bdd9b84c897441e7a5c8ad1f0f292
https://www.mend.io/vulnerability-database/CVE-2015-8726

Severity Score

Weakness Type (CWE)

Buffer Errors

CWE-119

Input Validation

CWE-20

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us