CVE-2015-8723

5.5 mediumEPSS 4.7%

Medium (5.5) in wireshark wireshark. EPSS 4.7% chance of exploitation in the next 30 days.

The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 4.7% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWEs: CWE-20, CWE-119
Published: 2016-01-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wireshark:wireshark

References

http://www.debian.org/security/2016/dsa-3505
http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
http://www.securityfocus.com/bid/79382
http://www.securitytracker.com/id/1034551
http://www.wireshark.org/security/wnpa-sec-2015-42.html

Check your stack JSON