Wind River Support Network

HomeDefectsLIN8-2484
Fixed

LIN8-2484 : Security Advisory - wireshark - CVE-2015-8723

Created: Jan 13, 2016    Updated: Dec 3, 2018
Resolved Date: Jan 27, 2016
Found In Version: 8.0
Fix Version: 8.0.0.2
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8723

Other Downloads


CVEs


Live chat
Online