CVE-2015-8734

Description

The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.093

Associated Vulnerability

VulnerabilityOS Platform
Update of Wireshark (2.0.1)Windows
Update of Wireshark X64 (2.0.1)Windows
Multiple vulnerabilities are fixed in Update for WireShark for Mac (2.0.1)Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-302390Update of Wireshark (2.0.1)
PATCH-302391Update of Wireshark X64 (2.0.1)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234