CVE-2015-4651
Publication date 22 July 2015
Last updated 24 July 2024
Ubuntu priority
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not properly determine whether enough memory is available for storing IP address strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Status
Package | Ubuntu Release | Status |
---|---|---|
wireshark | 18.04 LTS bionic |
Fixed 2.6.3-1~ubuntu18.04.1
|
16.04 LTS xenial |
Fixed 2.6.3-1~ubuntu16.04.1
|
|
14.04 LTS trusty |
Fixed 2.6.3-1~ubuntu14.04.1
|
|