UBUNTU-CVE-2015-8723

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2015-8723

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-8723.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2015-8723

Related

CVE-2015-8723

Published

2016-01-04T05:59:00Z

Modified

2016-01-04T05:59:00Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.

References

Affected packages

Ubuntu:14.04:LTS / wireshark

Package

Name: wireshark
Purl: pkg:deb/ubuntu/wireshark?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1

Affected versions

1.*

1.10.2-1

1.10.3-1

1.10.5-1ubuntu1

1.10.5-2

1.10.6-1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwireshark-data"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwireshark-dev"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwireshark-dev-dbgsym"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwireshark5"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwireshark5-dbgsym"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwiretap-dev"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwiretap-dev-dbgsym"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwiretap4"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwiretap4-dbgsym"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwsutil-dev"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwsutil-dev-dbgsym"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwsutil4"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "libwsutil4-dbgsym"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "tshark"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "tshark-dbgsym"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "wireshark"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "wireshark-common"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "wireshark-common-dbgsym"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "wireshark-dbg"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "wireshark-dbgsym"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "wireshark-dev"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "wireshark-dev-dbgsym"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "wireshark-doc"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "wireshark-qt"
        },
        {
            "binary_version": "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1",
            "binary_name": "wireshark-qt-dbgsym"
        }
    ]
}

Ubuntu:16.04:LTS / wireshark

Package

Name: wireshark
Purl: pkg:deb/ubuntu/wireshark?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.2+ga16e22e-1

Affected versions

1.*

1.12.7+g7fc8978-1

1.12.8+g5b6e543-2

2.*

2.0.1+g59ea380-3build1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "libwireshark-data"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "libwireshark-dev"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "libwireshark6"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "libwireshark6-dbgsym"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "libwiretap-dev"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "libwiretap5"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "libwiretap5-dbgsym"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "libwsutil-dev"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "libwsutil6"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "libwsutil6-dbgsym"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "tshark"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "tshark-dbgsym"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "wireshark"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "wireshark-common"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "wireshark-common-dbgsym"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "wireshark-dev"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "wireshark-doc"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "wireshark-gtk"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "wireshark-gtk-dbgsym"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "wireshark-qt"
        },
        {
            "binary_version": "2.0.2+ga16e22e-1",
            "binary_name": "wireshark-qt-dbgsym"
        }
    ]
}