Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2015-2192

Integer overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.

Related bugs and status

CVE-2015-2192 (Candidate) is related to these bugs:

Bug #1440202: [Security] April 3 2015 - 6 New CVEs affect Wireshark

		In	Importance	Status
1440202	[Security] April 3 2015 - 6 New CVEs affect Wireshark	wireshark (Ubuntu)	Medium	Fix Released
1440202	[Security] April 3 2015 - 6 New CVEs affect Wireshark	wireshark (Ubuntu Trusty)	Medium	Confirmed
1440202	[Security] April 3 2015 - 6 New CVEs affect Wireshark	wireshark (Ubuntu Utopic)	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

References

CONFIRM: http://www.wireshark.o...
CONFIRM: https://bugs.wireshark...
CONFIRM: https://code.wireshark...
SUSE: openSUSE-SU-2015:0489
SECTRACK: 1031858
BID: 72937
GENTOO: GLSA-201510-03