Vulnetix
Try Vulnetix Request Demo
CVE-2015-6243 PUBLISHED

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.

EPSS 0.66% · 71.0th percentile

Risk Scores

EPSS Score
0.66%
71.0th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSwireshark2.4.3-1, 2.4.5-1, 2.4.4-1
Ubuntu:14.04:LTSwireshark1.10.5-1ubuntu1, 1.10.3-1, 0
Ubuntu:16.04:LTSwireshark2.2.6+g32dac6a-2ubuntu0.16.04, 2.0.2+ga16e22e-1, 2.0.1+g59ea380-3build1

Timeline

References

Open in Interactive Console →