CVE-2015-0560: Medium severity wireshark vulnerability

Published Jan 10, 2015

Updated

The dissectwccp2r1addresstableinfo function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not initialize certain data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Affected Software

17 affected components

Wireshark Wireshark=1.10.0

Wireshark Wireshark=1.10.1

Wireshark Wireshark=1.10.2

Wireshark Wireshark=1.10.3

Wireshark Wireshark=1.10.4

Wireshark Wireshark=1.10.5

Wireshark Wireshark=1.10.6

Wireshark Wireshark=1.10.7

Wireshark Wireshark=1.10.8

Wireshark Wireshark=1.10.9

Wireshark Wireshark=1.10.10

Wireshark Wireshark=1.10.11

Wireshark Wireshark=1.12.0

Wireshark Wireshark=1.12.1

Wireshark Wireshark=1.12.2

openSUSE openSUSE=13.1

openSUSE openSUSE=13.2

Event History

Jan 10, 2015

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0560?

The severity of CVE-2015-0560 is classified as a denial of service vulnerability.

How do I fix CVE-2015-0560?

To fix CVE-2015-0560, update Wireshark to version 1.10.12 or later, or 1.12.3 or later.

What versions of Wireshark are affected by CVE-2015-0560?

Wireshark versions 1.10.0 through 1.10.11 and 1.12.0 through 1.12.2 are affected by CVE-2015-0560.

What type of attack does CVE-2015-0560 enable?

CVE-2015-0560 allows remote attackers to cause an application crash through crafted input.

Is CVE-2015-0560 a local or remote vulnerability?

CVE-2015-0560 is a remote vulnerability that can be exploited by sending maliciously crafted packets.