vulnerability

Oracle Solaris 11: CVE-2015-8718: Vulnerability in Wireshark

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Jan 4, 2016
Added
May 29, 2017
Modified
Feb 1, 2022

Description

Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Match MSG/RES packets for async NLM" option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Solution(s)

oracle-solaris-11-3-upgrade-diagnostic-wireshark-1-12-9-0-175-3-5-0-4-0oracle-solaris-11-3-upgrade-diagnostic-wireshark-tshark-1-12-9-0-175-3-5-0-4-0oracle-solaris-11-3-upgrade-diagnostic-wireshark-wireshark-common-1-12-9-0-175-3-5-0-4-0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.