Home

CVE-2015-3814

Description

The (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 interpret a zero value as a length rather than an error condition, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.189

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2015-3814,CVE-2015-3812,CVE-2015-3811 are fixed in Wireshark x64 1.10.14Windows
Multiple vulnerabilities fixed in Wireshark x64 1.12.5Windows
Vulnerabilities CVE-2013-4083,CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.0Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.1Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.10Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.11Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.12Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.13Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.2Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.3Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.4Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.5Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.6Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.7Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.8Mac
Vulnerabilities CVE-2015-3811,CVE-2015-3812,CVE-2015-3814 are affected in WireShark For Mac 1.10.9Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.0Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.1Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.2Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.3Mac
Multiple Vulnerabilities are affected in WireShark For Mac 1.12.4Mac
Vulnerabilities CVE-2015-3814 are affected in WireShark For Mac 1.10.14Mac
Multiple vulnerabilities are fixed in Wireshark for Mac 1.12.5Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-338541Wireshark (3.6.24)
PATCH-338541Wireshark (3.6.24)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-612949WireShark for Mac (4.6.2)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234