Candidate: CVE-2015-7830 PublicDate: 2015-11-15 03:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7830 https://www.wireshark.org/security/wnpa-sec-2015-30.html Description: The pcapng_read_if_descr_block function in wiretap/pcapng.c in the pcapng parser in Wireshark 1.12.x before 1.12.8 uses too many levels of pointer indirection, which allows remote attackers to cause a denial of service (incorrect free and application crash) via a crafted packet that triggers interface-filter copying. Ubuntu-Description: Notes: tyhicks> Affected versions: 1.12.0 to 1.12.7 Bugs: Priority: low Discovered-by: Dario Lombardo and Shannon Sabens Assigned-to: CVSS: Patches_wireshark: upstream_wireshark: released (1.12.8) precise_wireshark: not-affected trusty_wireshark: not-affected (1.10.6-1) trusty/esm_wireshark: not-affected (1.10.6-1) vivid_wireshark: ignored (reached end-of-life) vivid/stable-phone-overlay_wireshark: DNE vivid/ubuntu-core_wireshark: DNE wily_wireshark: not-affected (1.12.7+g7fc8978-1) devel_wireshark: not-affected (1.12.7+g7fc8978-1)