CVE-2015-3812

Description

Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers to cause a denial of service (memory consumption) via a crafted packet.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.656

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2015-3814,CVE-2015-3812,CVE-2015-3811 are fixed in Wireshark x64 1.10.14Windows
Multiple vulnerabilities fixed in Wireshark x64 1.12.5Windows
Vulnerabilities CVE-2013-4083,CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.0Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.1Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.10Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.11Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.12Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.13Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.2Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.3Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.4Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.5Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.6Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.7Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.8Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.9Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.0Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.1Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.2Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.3Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.4Mac
Multiple vulnerabilities are fixed in Wireshark for Mac 1.12.5Mac
(RHSA-2017:0631) Moderate: wireshark security and bug fix update wireshark-1.8.10-25.el6.i686.rpmLinux
(RHSA-2017:0631) Moderate: wireshark security and bug fix update wireshark-1.8.10-25.el6.x86_64.rpmLinux
(RHSA-2017:0631) Moderate: wireshark security and bug fix update wireshark-devel-1.8.10-25.el6.i686.rpmLinux
(RHSA-2017:0631) Moderate: wireshark security and bug fix update wireshark-devel-1.8.10-25.el6.x86_64.rpmLinux
(RHSA-2017:0631) Moderate: wireshark security and bug fix update wireshark-gnome-1.8.10-25.el6.i686.rpmLinux
(RHSA-2017:0631) Moderate: wireshark security and bug fix update wireshark-gnome-1.8.10-25.el6.x86_64.rpmLinux
Wireshark update (ELSA-2017-0631) wireshark-1.8.10-25.0.1.el6.x86_64.rpmLinux
Wireshark-devel update (ELSA-2017-0631) wireshark-devel-1.8.10-25.0.1.el6.x86_64.rpmLinux
Wireshark-gnome update (ELSA-2017-0631) wireshark-gnome-1.8.10-25.0.1.el6.x86_64.rpmLinux
Wireshark update (ELSA-2017-0631) wireshark-1.8.10-25.0.1.el6.i686.rpmLinux
Wireshark-devel update (ELSA-2017-0631) wireshark-devel-1.8.10-25.0.1.el6.i686.rpmLinux
Wireshark-gnome update (ELSA-2017-0631) wireshark-gnome-1.8.10-25.0.1.el6.i686.rpmLinux
(CESA-2017:0631) Moderate: wireshark security and bug fix update wireshark-1.8.10-25.el6.i686.rpmLinux
(CESA-2017:0631) Moderate: wireshark security and bug fix update wireshark-devel-1.8.10-25.el6.i686.rpmLinux
(CESA-2017:0631) Moderate: wireshark security and bug fix update wireshark-gnome-1.8.10-25.el6.i686.rpmLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-338541Wireshark (3.6.24)
PATCH-338541Wireshark (3.6.24)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-612949WireShark for Mac (4.6.2)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234