medium5.5Public exploit code
CVE-2015-8735
The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wireshark - memcpy 'get_value / dissect_btatt' SIGSEGV2015-12-16 · dos · multiple · Verified
Impact
The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (invalid write operation and application crash) via a crafted packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wireshark | Wireshark | Version 2.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/79382
- http://www.securitytracker.com/id/1034551
- http://www.wireshark.org/security/wnpa-sec-2015-53.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11817
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=83bad0215dae54e77d34f8b187900125f672366e
- https://security.gentoo.org/glsa/201604-05
- http://www.securityfocus.com/bid/79382
- http://www.securitytracker.com/id/1034551
- http://www.wireshark.org/security/wnpa-sec-2015-53.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11817
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=83bad0215dae54e77d34f8b187900125f672366e
- https://security.gentoo.org/glsa/201604-05