CVE-2015-3813 - The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.

CVE-2015-3813

Summary

The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine the defragmentation state in a case of an insufficient snapshot length, which allows remote attackers to cause a denial of service (memory consumption) via a crafted packet.

References

Vulnerable Configurations

cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 05-01-2018 - 02:30)
Impact:
Exploitability:

CWE

CWE-399

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

redhat via4

advisories

bugzilla

id	1240675
title	No dissection of the TLS Certificate Verify message

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND
comment wireshark is earlier than 0:1.8.10-25.el6
oval oval:com.redhat.rhsa:tst:20170631001
comment wireshark is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100924002

AND

comment wireshark-devel is earlier than 0:1.8.10-25.el6
oval oval:com.redhat.rhsa:tst:20170631003
comment wireshark-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100924004

AND

comment wireshark-gnome is earlier than 0:1.8.10-25.el6
oval oval:com.redhat.rhsa:tst:20170631005
comment wireshark-gnome is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20100924006

rhsa

id	RHSA-2017:0631
released	2017-03-21
severity	Moderate
title	RHSA-2017:0631: wireshark security and bug fix update (Moderate)

rpms

wireshark-0:1.10.14-7.el7
wireshark-debuginfo-0:1.10.14-7.el7
wireshark-devel-0:1.10.14-7.el7
wireshark-gnome-0:1.10.14-7.el7
wireshark-0:1.8.10-25.el6
wireshark-debuginfo-0:1.8.10-25.el6
wireshark-devel-0:1.8.10-25.el6
wireshark-gnome-0:1.8.10-25.el6

refmap via4

bid	74633
confirm	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html http://www.wireshark.org/security/wnpa-sec-2015-16.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11129 https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c35f2ccb4433718416551cc7a85afb0860529d57
debian	DSA-3277
gentoo	GLSA-201510-03

Last major update

05-01-2018 - 02:30

Published

26-05-2015 - 15:59

Last modified

05-01-2018 - 02:30