Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-3810
HistoryMay 26, 2015 - 12:00 a.m.

CVE-2015-3810

2015-05-2600:00:00
ubuntu.com
ubuntu.com
11

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.004 Low

EPSS

Percentile

72.3%

epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark
1.12.x before 1.12.5 uses a recursive algorithm, which allows remote
attackers to cause a denial of service (CPU consumption) via a crafted
packet.

Bugs

Notes

Author Note
tyhicks “Affected versions: 1.12.0 to 1.12.4”
OSVersionArchitecturePackageVersionFilename
ubuntu15.04noarchwireshark< 1.12.1+g01b65bf-4+deb8u1build0.15.04.1UNKNOWN

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.004 Low

EPSS

Percentile

72.3%