← Back

CVE-2015-2191

nvd nist
Published: Mar 8, 2015Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.

Affected (22)

Products: Debian: Debian Linux · Mageia: Mageia · Wireshark: Wireshark · +1 more
Show all products
1 product
Debian Linux
1 product
Mageia
1 product
Wireshark
1 product
Opensuse
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Version 7.0
Version 8.0
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 4.0
Configuration C
17 vulnerable
Vulnerable SoftwareAffected Versions
Wireshark
Version 1.10.0
Version 1.10.10
Version 1.10.11
Version 1.10.12
Version 1.10.1
Version 1.10.2
Version 1.10.3
Version 1.10.4
Version 1.10.5
Version 1.10.6
Version 1.10.7
Version 1.10.8
Version 1.10.9
Version 1.12.0
Version 1.12.1
Version 1.12.2
Version 1.12.3
Configuration D
2 vulnerable
Vulnerable SoftwareAffected Versions
Opensuse
Version 13.1
Version 13.2

Related CWEs

References (24)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.