CVE-2015-3809

High

Published: 26/05/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The dissect_lbmr_pser function in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, allowing remote attackers to cause a denial of service (infinite loop) via a crafted packet.

Risk Assessment

Attackers can exploit this vulnerability to disrupt the application's operation, potentially leading to service outages.

Recommendation

It is recommended to update Wireshark to version 1.12.5 or later to mitigate this vulnerability.

Other vulnerabilities in Wireshark LBMR dissector

CVE-2015-3808High
The dissect_lbmr_pser function in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject zero-length packets, allowing remote attackers to cause a denial of service (infinite loop) via a crafted packet.

Original NVD description (English source)

The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.