CVE-2015-3812

Published: May 26, 2015Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers to cause a denial of service (memory consumption) via a crafted packet.

Affected (21)

Products: Oracle: Linux, Solaris · Wireshark: Wireshark

2 products

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 7
Oracle Solaris	Version 11.2

Configuration B

19 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.10.0
Wireshark Wireshark	Version 1.10.10
Wireshark Wireshark	Version 1.10.11
Wireshark Wireshark	Version 1.10.12
Wireshark Wireshark	Version 1.10.13
Wireshark Wireshark	Version 1.10.1
Wireshark Wireshark	Version 1.10.2
Wireshark Wireshark	Version 1.10.3
Wireshark Wireshark	Version 1.10.4
Wireshark Wireshark	Version 1.10.5
Wireshark Wireshark	Version 1.10.6
Wireshark Wireshark	Version 1.10.7
Wireshark Wireshark	Version 1.10.8
Wireshark Wireshark	Version 1.10.9
Wireshark Wireshark	Version 1.12.0
Wireshark Wireshark	Version 1.12.1
Wireshark Wireshark	Version 1.12.2
Wireshark Wireshark	Version 1.12.3
Wireshark Wireshark	Version 1.12.4

Related CWEs

References (18)

http://rhn.redhat.com/errata/RHSA-2017-0631.html

Source: cve@mitre.org

http://www.debian.org/security/2015/dsa-3277

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/74637

Source: cve@mitre.org

http://www.wireshark.org/security/wnpa-sec-2015-15.html

Source: cve@mitre.org

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11088

Source: cve@mitre.org

Issue TrackingPatchVendor Advisory

https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b8ccc2a6add29823a0ff0492fc50372449007e7b

Source: cve@mitre.org

https://security.gentoo.org/glsa/201510-03

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2017-0631.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3277

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/bid/74637

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2015-15.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11088

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchVendor Advisory

https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b8ccc2a6add29823a0ff0492fc50372449007e7b

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201510-03

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.