Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-3815

Опубликовано: 26 мая 2015
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 5

Описание

The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than CVE-2015-3906.

РелизСтатусПримечание
devel

not-affected

1.12.5+g5819e5b-1
esm-infra-legacy/trusty

not-affected

1.10.6-1
precise

not-affected

trusty

not-affected

1.10.6-1
trusty/esm

not-affected

1.10.6-1
upstream

released

1.12.5+g5819e5b-1
utopic

ignored

end of life
vivid

released

1.12.1+g01b65bf-4+deb8u1build0.15.04.1

Показывать по

EPSS

Процентиль: 67%
0.00548
Низкий

5 Medium

CVSS2

Связанные уязвимости

redhat
больше 10 лет назад

The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than CVE-2015-3906.

nvd
больше 10 лет назад

The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than CVE-2015-3906.

debian
больше 10 лет назад

The detect_version function in wiretap/logcat.c in the Android Logcat ...

github
больше 3 лет назад

The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than CVE-2015-3906.

EPSS

Процентиль: 67%
0.00548
Низкий

5 Medium

CVSS2