ubuntu · CVE-2015-2188

Quick triage

Priority: medium Published: 2015-03-08 02:59:00 UTC Updated: 2024-07-24 15:57:39 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-2188 medium priority: Ubuntu including 1 source packages (wireshark), 12 status rows across 12 suites (artful, bionic, lucid, precise, trusty, upstream, utopic, vivid, wily, xenial, yakkety, zesty): released 10, not-affected 2.

Description:

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that is improperly handled during decompression.

cvelogic Threat Intelligence