CVE-2015-3808

High

Published: 26/05/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The dissect_lbmr_pser function in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject zero-length packets, allowing remote attackers to cause a denial of service (infinite loop) via a crafted packet.

Risk Assessment

Attackers can exploit this vulnerability to cause service outages, potentially leading to downtime and loss of availability for users.

Recommendation

It is recommended to update Wireshark to version 1.12.5 or later to mitigate this vulnerability.

Other vulnerabilities in Wireshark LBMR dissector

CVE-2015-3809High
The dissect_lbmr_pser function in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, allowing remote attackers to cause a denial of service (infinite loop) via a crafted packet.

Original NVD description (English source)

The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.