CVE-2015-0562: Use After Free

Published Jan 10, 2015

Updated

Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory.

Affected Software

15 affected components

Wireshark Wireshark=1.10.0

Wireshark Wireshark=1.10.1

Wireshark Wireshark=1.10.2

Wireshark Wireshark=1.10.3

Wireshark Wireshark=1.10.4

Wireshark Wireshark=1.10.5

Wireshark Wireshark=1.10.6

Wireshark Wireshark=1.10.7

Wireshark Wireshark=1.10.8

Wireshark Wireshark=1.10.9

Wireshark Wireshark=1.10.10

Wireshark Wireshark=1.10.11

Wireshark Wireshark=1.12.0

Wireshark Wireshark=1.12.1

Wireshark Wireshark=1.12.2

Event History

Jan 10, 2015

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0562?

CVE-2015-0562 is classified as a moderate severity vulnerability due to its potential to cause denial of service through application crashes.

How do I fix CVE-2015-0562?

To fix CVE-2015-0562, upgrade Wireshark to version 1.10.12 or 1.12.3 or later.

Which versions of Wireshark are affected by CVE-2015-0562?

CVE-2015-0562 affects Wireshark versions 1.10.0 through 1.10.11 and 1.12.0 through 1.12.2.

What is the impact of CVE-2015-0562 exploitation?

Exploitation of CVE-2015-0562 can lead to a denial of service condition by crashing the Wireshark application.

Is CVE-2015-0562 a remote attack vector?

Yes, CVE-2015-0562 allows remote attackers to cause a denial of service by sending crafted packets.