CVE-2015-6244

Published: Aug 24, 2015Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained in packet data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Affected (9)

Products: Wireshark: Wireshark · Oracle: Linux, Solaris

1 product

2 products

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.12.0
Wireshark Wireshark	Version 1.12.1
Wireshark Wireshark	Version 1.12.2
Wireshark Wireshark	Version 1.12.3
Wireshark Wireshark	Version 1.12.4
Wireshark Wireshark	Version 1.12.5
Wireshark Wireshark	Version 1.12.6

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 7
Oracle Solaris	Version 11.3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (26)

http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165509.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html

Source: cve@mitre.org

http://www.debian.org/security/2015/dsa-3367

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/76383

Source: cve@mitre.org

http://www.securitytracker.com/id/1033272

Source: cve@mitre.org

http://www.wireshark.org/security/wnpa-sec-2015-24.html

Source: cve@mitre.org

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11389

Source: cve@mitre.org

Issue TrackingVendor Advisory

https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=31571144be5f03f054a9c7e195b38c2f5792fe54

Source: cve@mitre.org

https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=43c2e5769a17f0945fdcdabe35204a13ca9bbc85

Source: cve@mitre.org

https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=655b0dc623e29da212be3e205314624fe3182562

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165509.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3367

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/bid/76383

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1033272

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2015-24.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11389

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=31571144be5f03f054a9c7e195b38c2f5792fe54

Source: af854a3a-2127-422b-91ae-364da2661108

https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=43c2e5769a17f0945fdcdabe35204a13ca9bbc85

Source: af854a3a-2127-422b-91ae-364da2661108

https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=655b0dc623e29da212be3e205314624fe3182562

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.