CVE-2015-6243 in Wiresharkinfo

Summary

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

08/14/2015

Disclosure

08/24/2015

CPE

ready

CVSS

5.3

EPSS

0.00661

Activities

Very Low

Sources

Do you need the next level of professionalism?

Upgrade your account now!