DEBIAN-CVE-2015-8723

DEBIAN-CVE-2015-8723 PUBLISHED CVSS 5.5 MEDIUM

The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.

Risk Scores

CVSS v3.0

5.5

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:14	wireshark	0, 0, 0
Debian:12	wireshark	0, 0, 0
Debian:11	wireshark	0, 0, 0
Debian:13	wireshark	0, 0, 0

Timeline

Jan 4, 2016 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2015-8723 advisory

Open in Interactive Console →