Lucene search

K
cve[email protected]CVE-2015-6242
HistoryAug 24, 2015 - 11:59 p.m.

CVE-2015-6242

2015-08-2423:59:01
CWE-20
web.nvd.nist.gov
46
wireshark
vulnerability
memory manager
denial of service
cve-2015-6242
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

69.1%

The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet.

Affected configurations

NVD
Node
oraclesolarisMatch11.3
Node
wiresharkwiresharkMatch1.12.0
OR
wiresharkwiresharkMatch1.12.1
OR
wiresharkwiresharkMatch1.12.2
OR
wiresharkwiresharkMatch1.12.3
OR
wiresharkwiresharkMatch1.12.4
OR
wiresharkwiresharkMatch1.12.5
OR
wiresharkwiresharkMatch1.12.6
VendorProductVersionCPE
oraclesolaris11.3cpe:/o:oracle:solaris:11.3:::

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

69.1%