Lucene search

K
cve[email protected]CVE-2015-0562
HistoryJan 10, 2015 - 2:59 a.m.

CVE-2015-0562

2015-01-1002:59:40
web.nvd.nist.gov
43
wireshark
vulnerability
cve-2015-0562
dec
dna routing protocol
use-after-free
denial of service
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.8%

Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory.

Affected configurations

NVD
Node
wiresharkwiresharkMatch1.10.0
OR
wiresharkwiresharkMatch1.10.1
OR
wiresharkwiresharkMatch1.10.2
OR
wiresharkwiresharkMatch1.10.3
OR
wiresharkwiresharkMatch1.10.4
OR
wiresharkwiresharkMatch1.10.5
OR
wiresharkwiresharkMatch1.10.6
OR
wiresharkwiresharkMatch1.10.7
OR
wiresharkwiresharkMatch1.10.8
OR
wiresharkwiresharkMatch1.10.9
OR
wiresharkwiresharkMatch1.10.10
OR
wiresharkwiresharkMatch1.10.11
OR
wiresharkwiresharkMatch1.12.0
OR
wiresharkwiresharkMatch1.12.1
OR
wiresharkwiresharkMatch1.12.2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.8%