Candidate: CVE-2015-4652 PublicDate: 2015-07-22 01:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4652 http://www.wireshark.org/security/wnpa-sec-2015-20.html Description: epan/dissectors/packet-gsm_a_dtap.c in the GSM DTAP dissector in Wireshark 1.12.x before 1.12.6 does not properly validate digit characters, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the de_emerg_num_list and de_bcd_num functions. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_wireshark: upstream_wireshark: released (1.12.6+gee1fce6-1) precise_wireshark: ignored (reached end-of-life) precise/esm_wireshark: DNE (precise was needs-triage) trusty_wireshark: released (2.6.3-1~ubuntu14.04.1) trusty/esm_wireshark: released (2.6.3-1~ubuntu14.04.1) utopic_wireshark: ignored (reached end-of-life) vivid_wireshark: released (1.12.1+g01b65bf-4+deb8u2) vivid/stable-phone-overlay_wireshark: DNE vivid/ubuntu-core_wireshark: DNE wily_wireshark: not-affected (1.12.6+gee1fce6-1) xenial_wireshark: released (2.6.3-1~ubuntu16.04.1) yakkety_wireshark: not-affected (1.12.6+gee1fce6-1) zesty_wireshark: not-affected (1.12.6+gee1fce6-1) artful_wireshark: not-affected (1.12.6+gee1fce6-1) bionic_wireshark: released (2.6.3-1~ubuntu18.04.1) devel_wireshark: not-affected (2.6.3-1)