4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
70.7%
The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11
dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not
validate the relationship between the total length and the capture length,
which allows remote attackers to cause a denial of service (stack-based
buffer overflow and application crash) via a crafted packet.
www.wireshark.org/security/wnpa-sec-2015-42.html
bugs.wireshark.org/bugzilla/show_bug.cgi?id=11790
code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=40b283181c63cb28bc6f58d80315eccca6650da0
launchpad.net/bugs/cve/CVE-2015-8723
nvd.nist.gov/vuln/detail/CVE-2015-8723
security-tracker.debian.org/tracker/CVE-2015-8723
www.cve.org/CVERecord?id=CVE-2015-8723
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
70.7%