CVE-2015-0564: Buffer Overflow

Published Jan 10, 2015

Updated

Buffer underflow in the ssldecryptrecord function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session.

Affected Software

21 affected components

Wireshark Wireshark=1.10.0

Wireshark Wireshark=1.10.1

Wireshark Wireshark=1.10.2

Wireshark Wireshark=1.10.3

Wireshark Wireshark=1.10.4

Wireshark Wireshark=1.10.5

Wireshark Wireshark=1.10.6

Wireshark Wireshark=1.10.7

Wireshark Wireshark=1.10.8

Wireshark Wireshark=1.10.9

Wireshark Wireshark=1.10.10

Wireshark Wireshark=1.10.11

Wireshark Wireshark=1.12.0

Wireshark Wireshark=1.12.1

Wireshark Wireshark=1.12.2

Oracle Linux=7

Oracle Solaris=11.2

Debian Debian Linux=7.0

Debian Debian Linux=8.0

openSUSE openSUSE=13.1

openSUSE openSUSE=13.2

Event History

Jan 10, 2015

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0564?

CVE-2015-0564 has a severity level classified as high due to its potential to cause denial of service through application crashes.

How do I fix CVE-2015-0564?

To fix CVE-2015-0564, update Wireshark to version 1.10.12 or higher for the 1.10.x branch and to version 1.12.3 or higher for the 1.12.x branch.

What versions of Wireshark are affected by CVE-2015-0564?

Wireshark versions 1.10.0 through 1.10.11 and 1.12.0 through 1.12.2 are affected by CVE-2015-0564.

Can CVE-2015-0564 be exploited remotely?

Yes, CVE-2015-0564 can be exploited remotely by sending a crafted packet that triggers a buffer underflow during SSL record decryption.

What impact does CVE-2015-0564 have on system performance?

CVE-2015-0564 can lead to application crashes, causing denial of service and disruption of network analysis tasks performed by Wireshark.