Medium severity · published Jan 4, 2016
CVE-2015-8723
The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship…
5.5
CVSS
4.7%
EPSS
No
On KEV
Description
The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Wireshark · Wireshark
1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-8723
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-8723
www.debian.org
http://www.debian.org/security/2016/dsa-3505
www.oracle.com
http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
www.securityfocus.com
http://www.securityfocus.com/bid/79382
www.securitytracker.com
http://www.securitytracker.com/id/1034551
Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2015-42.html
bugs.wireshark.org
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11790
More from Wireshark
9.8
CVE-2026-76886
Heap-based Buffer Overflow in Wireshark
9.8
CVE-2022-0582
Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
9.8
CVE-2018-6836
The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers…
8.8
CVE-2026-95387
Heap-based Buffer Overflow in Wireshark
8.8
CVE-2026-5402
Heap-based Buffer Overflow in Wireshark