medium5.3Public exploit code
CVE-2015-8740
The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number o…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wireshark - dissect_diameter_base_framed_ipv6_prefix Stack Buffer Overflow2015-12-16 · dos · multiple · Verified
Impact
The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wireshark | Wireshark | Version 2.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/79382
- http://www.securitytracker.com/id/1034551
- http://www.wireshark.org/security/wnpa-sec-2015-58.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11846
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e78093f69f1e95df919bbe644baa06c7e4e720c0
- https://security.gentoo.org/glsa/201604-05
- http://www.securityfocus.com/bid/79382
- http://www.securitytracker.com/id/1034551
- http://www.wireshark.org/security/wnpa-sec-2015-58.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11846
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e78093f69f1e95df919bbe644baa06c7e4e720c0
- https://security.gentoo.org/glsa/201604-05