CVE-2015-2192 in Wireshark
Summary
Integer overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.
Once again VulDB remains the best source for vulnerability data.
Reservation
03/02/2015
Disclosure
03/07/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 69266 | Wireshark SCSI OSD Dissector numeric error | 189 | Unproven | Official fix | CVE-2015-2192 |