CVE-2015-6241: Input Validation

Published Aug 24, 2015

Updated

The prototreeaddbytesitem function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before 1.12.7 does not properly terminate a data structure after a failure to locate a number within a string, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Affected Software

8 affected components

Wireshark Wireshark=1.12.0

Wireshark Wireshark=1.12.1

Wireshark Wireshark=1.12.2

Wireshark Wireshark=1.12.3

Wireshark Wireshark=1.12.4

Wireshark Wireshark=1.12.5

Wireshark Wireshark=1.12.6

Oracle Solaris=11.3

Event History

Aug 24, 2015

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6241?

CVE-2015-6241 has a severity rating that indicates it can lead to denial of service due to application crashes.

How do I fix CVE-2015-6241?

To fix CVE-2015-6241, upgrade Wireshark to version 1.12.7 or later.

Which versions of Wireshark are affected by CVE-2015-6241?

CVE-2015-6241 affects Wireshark versions 1.12.0 through 1.12.6.

Can CVE-2015-6241 be exploited remotely?

Yes, CVE-2015-6241 can be exploited by remote attackers, potentially causing application crashes.

What type of vulnerability is CVE-2015-6241?

CVE-2015-6241 is a denial of service vulnerability found in the protocol-tree implementation of Wireshark.