CVE-2015-0563: Input Validation

Published Jan 10, 2015

Updated

epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for certain string-append operations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Affected Software

17 affected components

openSUSE openSUSE=13.1

openSUSE openSUSE=13.2

Wireshark Wireshark=1.10.0

Wireshark Wireshark=1.10.1

Wireshark Wireshark=1.10.2

Wireshark Wireshark=1.10.3

Wireshark Wireshark=1.10.4

Wireshark Wireshark=1.10.5

Wireshark Wireshark=1.10.6

Wireshark Wireshark=1.10.7

Wireshark Wireshark=1.10.8

Wireshark Wireshark=1.10.9

Wireshark Wireshark=1.10.10

Wireshark Wireshark=1.10.11

Wireshark Wireshark=1.12.0

Wireshark Wireshark=1.12.1

Wireshark Wireshark=1.12.2

Event History

Jan 10, 2015

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0563?

CVE-2015-0563 has a severity rating that indicates it allows for a denial of service due to an application crash.

How do I fix CVE-2015-0563?

To fix CVE-2015-0563, you should update Wireshark to version 1.10.12 or 1.12.3 or later.

Which versions of Wireshark are affected by CVE-2015-0563?

The affected versions of Wireshark are 1.10.x before 1.10.12 and 1.12.x before 1.12.3.

Can CVE-2015-0563 be exploited remotely?

Yes, CVE-2015-0563 can be exploited remotely through crafted packets sent to the vulnerable Wireshark versions.

What happens if CVE-2015-0563 is exploited?

Exploitation of CVE-2015-0563 can lead to an unintended application crash, causing a denial of service.