suse · CVE-2015-2189

Quick triage

Priority: medium Published: 2021-05-30 13:28:17 UTC Updated: 2026-04-18 18:23:20 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-2189 severity moderate: SUSE including 94 source package names (libwireshark13-3.2.2-3.35.2, libwireshark13-3.2.8-3.44.1, …), 144 product×package rows across 51 product lines (Image SLES12-SP5-SAP-Azure-LI-BYOS-Production, Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production, … (51 product lines)): Fixed 143, Known Not Affected 1.

Description:

Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via an invalid Interface Statistics Block (ISB) interface ID in a crafted packet.

cvelogic Threat Intelligence