The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2015-08-24 16:59
Updated : 2016-12-23 18:59
NVD link : CVE-2015-6249
Mitre link : CVE-2015-6249
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
wireshark
- wireshark
oracle
- solaris