Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-2188

Опубликовано: 08 мар. 2015
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5

Описание

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that is improperly handled during decompression.

РелизСтатусПримечание
artful

released

1.12.1+g01b65bf-4
bionic

released

2.6.3-1~ubuntu18.04.1
devel

not-affected

2.6.3-1
esm-apps/bionic

released

2.6.3-1~ubuntu18.04.1
esm-apps/xenial

released

2.6.3-1~ubuntu16.04.1
esm-infra-legacy/trusty

released

2.6.3-1~ubuntu14.04.1
lucid

not-affected

precise

not-affected

1.6.7-1
precise/esm

DNE

precise was not-affected [1.6.7-1]
trusty

released

2.6.3-1~ubuntu14.04.1

Показывать по

EPSS

Процентиль: 56%
0.00344
Низкий

5 Medium

CVSS2

Связанные уязвимости

redhat
больше 10 лет назад

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that is improperly handled during decompression.

nvd
больше 10 лет назад

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that is improperly handled during decompression.

debian
больше 10 лет назад

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x ...

github
больше 3 лет назад

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that is improperly handled during decompression.

suse-cvrf
больше 10 лет назад

Security update for wireshark

EPSS

Процентиль: 56%
0.00344
Низкий

5 Medium

CVSS2

Уязвимость CVE-2015-2188