CVE-2015-3811

Description

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, a different vulnerability than CVE-2015-2188.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.212

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2015-3814,CVE-2015-3812,CVE-2015-3811 are fixed in Wireshark x64 1.10.14Windows
Multiple vulnerabilities fixed in Wireshark x64 1.12.5Windows
Vulnerabilities CVE-2013-4083,CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.0Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.1Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.10Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.11Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.12Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.13Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.2Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.3Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.4Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.5Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.6Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.7Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.8Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.9Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.0Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.1Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.2Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.3Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.4Mac
Multiple vulnerabilities are fixed in Wireshark for Mac 1.12.5Mac
(RHSA-2017:0631) Moderate: wireshark security and bug fix update wireshark-1.8.10-25.el6.i686.rpmLinux
(RHSA-2017:0631) Moderate: wireshark security and bug fix update wireshark-1.8.10-25.el6.x86_64.rpmLinux
(RHSA-2017:0631) Moderate: wireshark security and bug fix update wireshark-devel-1.8.10-25.el6.i686.rpmLinux
(RHSA-2017:0631) Moderate: wireshark security and bug fix update wireshark-devel-1.8.10-25.el6.x86_64.rpmLinux
(RHSA-2017:0631) Moderate: wireshark security and bug fix update wireshark-gnome-1.8.10-25.el6.i686.rpmLinux
(RHSA-2017:0631) Moderate: wireshark security and bug fix update wireshark-gnome-1.8.10-25.el6.x86_64.rpmLinux
Wireshark update (ELSA-2017-0631) wireshark-1.8.10-25.0.1.el6.x86_64.rpmLinux
Wireshark-devel update (ELSA-2017-0631) wireshark-devel-1.8.10-25.0.1.el6.x86_64.rpmLinux
Wireshark-gnome update (ELSA-2017-0631) wireshark-gnome-1.8.10-25.0.1.el6.x86_64.rpmLinux
Wireshark update (ELSA-2017-0631) wireshark-1.8.10-25.0.1.el6.i686.rpmLinux
Wireshark-devel update (ELSA-2017-0631) wireshark-devel-1.8.10-25.0.1.el6.i686.rpmLinux
Wireshark-gnome update (ELSA-2017-0631) wireshark-gnome-1.8.10-25.0.1.el6.i686.rpmLinux
(CESA-2017:0631) Moderate: wireshark security and bug fix update wireshark-1.8.10-25.el6.i686.rpmLinux
(CESA-2017:0631) Moderate: wireshark security and bug fix update wireshark-devel-1.8.10-25.el6.i686.rpmLinux
(CESA-2017:0631) Moderate: wireshark security and bug fix update wireshark-gnome-1.8.10-25.el6.i686.rpmLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-338541Wireshark (3.6.24)
PATCH-338541Wireshark (3.6.24)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-612949WireShark for Mac (4.6.2)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234