CVE-2015-8723 EXPLOIT
5.5
MEDIUM · CVSS 3.0 · EPSS 4.7% (pctl 92)
Patch early
A public exploit exists.
Description
The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
Scoring
| CVSS | 5.5 (MEDIUM, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| EPSS | 4.69% — more likely to be exploited than 92% of all CVEs |
| Weakness | CWE-20 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2016-01-04 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| wireshark | wireshark |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Wireshark - AirPDcapPacketProcess Stack Buffer Overflow | 2015-12-16 |
References
- http://www.debian.org/security/2016/dsa-3505
- http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
- http://www.securityfocus.com/bid/79382
- http://www.securitytracker.com/id/1034551
- http://www.wireshark.org/security/wnpa-sec-2015-42.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11790
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=40b283181c63cb28bc6f58d80315eccca6650da0
- https://security.gentoo.org/glsa/201604-05
- http://www.debian.org/security/2016/dsa-3505
- http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
- http://www.securityfocus.com/bid/79382
- http://www.securitytracker.com/id/1034551
- http://www.wireshark.org/security/wnpa-sec-2015-42.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11790
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=40b283181c63cb28bc6f58d80315eccca6650da0
- https://security.gentoo.org/glsa/201604-05
→ the Explorer · watch your stack · NVD