CVE-2015-2188: Medium severity wireshark vulnerability
epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that is improperly handled during decompression.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2188?
CVE-2015-2188 has a severity rating that indicates potential for denial of service through application crashes.
How do I fix CVE-2015-2188?
To fix CVE-2015-2188, ensure that your Wireshark version is updated to at least 1.10.13 or 1.12.4.
Which versions of Wireshark are affected by CVE-2015-2188?
CVE-2015-2188 affects Wireshark versions 1.10.0 through 1.10.12 and 1.12.0 through 1.12.3.
What type of vulnerability is CVE-2015-2188?
CVE-2015-2188 is a vulnerability that leads to an out-of-bounds read and can cause application crashes.
Who can exploit CVE-2015-2188?
CVE-2015-2188 can be exploited by remote attackers using crafted packets to trigger the vulnerability.