CVE-2015-2189

Public on 2015-03-08
Modified on 2015-08-17
Description
Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via an invalid Interface Statistics Block (ISB) interface ID in a crafted packet.
Severity
Low severity
Low
See what this means
CVSS v3 Base Score
2.9
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 1 wireshark 2015-08-17 ALAS-2015-580 Fixed

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv2 2.9 AV:A/AC:M/Au:N/C:N/I:N/A:P
NVD CVSSv2 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2015-2189 Mitre: CVE-2015-2189