Medium severity · published Jan 4, 2016
CVE-2015-8733
The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the…
5.5
CVSS
4.1%
EPSS
No
On KEV
Description
The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.1% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Wireshark · Wireshark
1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-8733
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-8733
www.debian.org
http://www.debian.org/security/2016/dsa-3505
www.oracle.com
http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
www.securityfocus.com
http://www.securityfocus.com/bid/79814
www.securitytracker.com
http://www.securitytracker.com/id/1034551
Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2015-51.html
bugs.wireshark.org
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11827
More from Wireshark
9.8
CVE-2026-76886
Heap-based Buffer Overflow in Wireshark
9.8
CVE-2022-0582
Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
9.8
CVE-2018-6836
The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers…
8.8
CVE-2026-95387
Heap-based Buffer Overflow in Wireshark
8.8
CVE-2026-5402
Heap-based Buffer Overflow in Wireshark