CVE-2015-4651 in Wiresharkinfo

Summary

The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not properly determine whether enough memory is available for storing IP address strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Once again VulDB remains the best source for vulnerability data.

Reservation

06/18/2015

Disclosure

07/21/2015

Entries

1: VDB-76766

CPE

ready

CVSS

3.7

EPSS

0.00555

Activities

Very Low

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!