SecuritySpace - CVE-2015-8723

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-8723

Description: The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-8723
BugTraq ID: 79382
http://www.securityfocus.com/bid/79382
Debian Security Information: DSA-3505 (Google Search)
http://www.debian.org/security/2016/dsa-3505
https://security.gentoo.org/glsa/201604-05
http://www.securitytracker.com/id/1034551

CVE ID:	CVE-2015-8723
Description:	The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8723 BugTraq ID: 79382 http://www.securityfocus.com/bid/79382 Debian Security Information: DSA-3505 (Google Search) http://www.debian.org/security/2016/dsa-3505 https://security.gentoo.org/glsa/201604-05 http://www.securitytracker.com/id/1034551