Candidate: CVE-2015-3808 PublicDate: 2015-05-26 15:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3808 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11036 https://www.wireshark.org/security/wnpa-sec-2015-12.html Description: The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_wireshark: upstream_wireshark: released (1.12.5+g5819e5b-1) precise_wireshark: ignored (reached end-of-life) precise/esm_wireshark: DNE (precise was needs-triage) trusty_wireshark: released (2.6.3-1~ubuntu14.04.1) trusty/esm_wireshark: released (2.6.3-1~ubuntu14.04.1) utopic_wireshark: ignored (reached end-of-life) vivid_wireshark: released (1.12.1+g01b65bf-4+deb8u1) vivid/stable-phone-overlay_wireshark: DNE vivid/ubuntu-core_wireshark: DNE wily_wireshark: not-affected (1.12.5+g5819e5b-1) xenial_wireshark: released (2.6.3-1~ubuntu16.04.1) yakkety_wireshark: not-affected (1.12.5+g5819e5b-1) zesty_wireshark: not-affected (1.12.5+g5819e5b-1) artful_wireshark: not-affected (1.12.5+g5819e5b-1) bionic_wireshark: released (2.6.3-1~ubuntu18.04.1) devel_wireshark: not-affected (2.6.3-1)