Lucene search

K
nvd[email protected]NVD:CVE-2015-3810
HistoryMay 26, 2015 - 3:59 p.m.

CVE-2015-3810

2015-05-2615:59:04
CWE-399
web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.3

Confidence

High

EPSS

0.004

Percentile

72.3%

epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.

Affected configurations

NVD
Node
wiresharkwiresharkMatch1.12.0
OR
wiresharkwiresharkMatch1.12.1
OR
wiresharkwiresharkMatch1.12.2
OR
wiresharkwiresharkMatch1.12.3
OR
wiresharkwiresharkMatch1.12.4

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.3

Confidence

High

EPSS

0.004

Percentile

72.3%