SecuritySpace - CVE-2015-8733

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-8733

Description: The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-8733
BugTraq ID: 79814
http://www.securityfocus.com/bid/79814
Debian Security Information: DSA-3505 (Google Search)
http://www.debian.org/security/2016/dsa-3505
https://security.gentoo.org/glsa/201604-05
http://www.securitytracker.com/id/1034551

CVE ID:	CVE-2015-8733
Description:	The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8733 BugTraq ID: 79814 http://www.securityfocus.com/bid/79814 Debian Security Information: DSA-3505 (Google Search) http://www.debian.org/security/2016/dsa-3505 https://security.gentoo.org/glsa/201604-05 http://www.securitytracker.com/id/1034551