PT-2015-7633 · Wireshark+2 · Wireshark+2

Dario Lombardo · Published 2015-10-14 · Updated 2024-06-15 · CVE-2015-7830

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.7

Description The issue is related to the pcapng parser in Wireshark, where the pcapng read if descr block function uses too many levels of pointer indirection. This allows remote attackers to cause a denial of service, resulting in an incorrect free and application crash, via a crafted packet that triggers interface-filter copying. The problem can also be described as a remote code execution vulnerability due to an arbitrary free in the PCAPNG if filter. A malformed packet can cause a denial of service.

Recommendations For Wireshark versions 1.12.x through 1.12.7, update to version 1.12.8 or later to resolve the issue. As a temporary workaround, consider disabling the pcapng file parser until a patch is available. Restrict access to crafted packets to minimize the risk of exploitation.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2015-1883

CVE-2015-7830

DSA-3505-1

MGASA-2015-0403

OPENSUSE-SU-2024:10199-1

SUSE-SU-2016:0109-1

SUSE-SU-2016:0110-1

SUSE-SU-2016_0109-1

SUSE-SU-2016_0110-1

ZDI-15-624

Affected Products

Alt Linux

Suse

Wireshark

References · 365

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8713 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8723 · Security Note
• https://errata.altlinux.org/ALT-PU-2015-1883 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6245 · Security Note
• https://osv.dev/vulnerability/DSA-3505-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8716 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6244 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7830 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8733 · Security Note
• https://ubuntu.com/security/CVE-2015-7830 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8718 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8719 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-7830 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0110-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-7830 · Vendor Advisory