← Back

CVE-2015-0561

nvd nist
Published: Jan 10, 2015Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a certain index value, which allows remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted packet.

Affected (18)

Wireshark
1 product
Wireshark
Opensuse
1 product
Opensuse
Oracle
1 product
Solaris
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Wireshark
Wireshark
Version 1.10.0
Wireshark
Version 1.10.10
Wireshark
Version 1.10.11
Wireshark
Version 1.10.1
Wireshark
Version 1.10.2
Wireshark
Version 1.10.3
Wireshark
Version 1.10.4
Wireshark
Version 1.10.5
Wireshark
Version 1.10.6
Wireshark
Version 1.10.7
Wireshark
Version 1.10.8
Wireshark
Version 1.10.9
Wireshark
Version 1.12.0
Wireshark
Version 1.12.1
Wireshark
Version 1.12.2
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Opensuse
Opensuse
Version 13.1
Opensuse
Version 13.2
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Solaris
Version 11.2

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Issue Tracking
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.