CVE-2015-3182
epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1...
epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
5.5
epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
CVE-2015-3182- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
CVE-2015-3182- Updated
- 2026-11-02
EUVDEUVD-2015-3252 No score
epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
EUVD-2015-3252- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p39p-p27m-9c4h
5.5
epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1...
epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
GHSA-p39p-p27m-9c4h- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
5.5
epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
CVE-2015-3182- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-3182
5.5
epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
DEBIAN-CVE-2015-3182- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-3182
5.5
epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
UBUNTU-CVE-2015-3182- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 1.12.0~rc1-1 | 1.12.0~rc1-1 |
wiresharkDebian:13 |
before 1.12.0~rc1-1 | 1.12.0~rc1-1 |
wiresharkDebian:14 |
before 1.12.0~rc1-1 | 1.12.0~rc1-1 |
wireshark-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 21 CVEs |
before 0:1.10.14-7.el7 | 0:1.10.14-7.el7 |
wireshark-develRed Hat:enterprise_linux:7::client From an advisory covering 21 CVEs |
before 0:1.10.14-7.el7 | 0:1.10.14-7.el7 |
wiresharkRed Hat:enterprise_linux:7::client From an advisory covering 21 CVEs |
before 0:1.10.14-7.el7 | 0:1.10.14-7.el7 |
wireshark-gnomeRed Hat:enterprise_linux:7::client From an advisory covering 21 CVEs |
before 0:1.10.14-7.el7 | 0:1.10.14-7.el7 |
wireshark-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 21 CVEs |
before 0:1.10.14-7.el7 | 0:1.10.14-7.el7 |
wireshark-develRed Hat:enterprise_linux:7::server From an advisory covering 21 CVEs |
before 0:1.10.14-7.el7 | 0:1.10.14-7.el7 |
wiresharkRed Hat:enterprise_linux:7::server From an advisory covering 21 CVEs |
before 0:1.10.14-7.el7 | 0:1.10.14-7.el7 |
Show 8 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wireshark-gnomeRed Hat:enterprise_linux:7::server From an advisory covering 21 CVEs |
before 0:1.10.14-7.el7 | 0:1.10.14-7.el7 |
wireshark-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 21 CVEs |
before 0:1.10.14-7.el7 | 0:1.10.14-7.el7 |
wireshark-develRed Hat:enterprise_linux:7::workstation From an advisory covering 21 CVEs |
before 0:1.10.14-7.el7 | 0:1.10.14-7.el7 |
wiresharkRed Hat:enterprise_linux:7::workstation From an advisory covering 21 CVEs |
before 0:1.10.14-7.el7 | 0:1.10.14-7.el7 |
wireshark-gnomeRed Hat:enterprise_linux:7::workstation From an advisory covering 21 CVEs |
before 0:1.10.14-7.el7 | 0:1.10.14-7.el7 |
wiresharkUbuntu:14.04:LTS |
before 2.6.3-1~ubuntu14.04.1, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-11.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1 |
2.6.3-1~ubuntu14.04.1 |
wiresharkUbuntu:16.04:LTS |
before 2.6.3-1~ubuntu16.04.1, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 |
2.6.3-1~ubuntu16.04.1 |
wiresharkUbuntu:18.04:LTS |
before 2.6.3-1~ubuntu18.04.1, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-1 |
2.6.3-1~ubuntu18.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-3182 is a medium vulnerability (CVSS 5.5) in Wireshark, published January 4, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.48%, the 74th percentile. Fixed in wireshark 1.12.0~rc1-1.
References
securitytracker.com/id/1032279
bugzilla.redhat.com/show_bug.cgi?id=1219409
oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
securityfocus.com/bid/74586
security.gentoo.org/glsa/201510-03
code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=373deb5f4182a5c4ab8c8418a7bbaa5d6e72bb05
Show 106 moreShow less
nvd.nist.gov/vuln/detail/CVE-2015-3182
code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=373deb5f4182a5c4ab8c8418a7bbaa5d6e72bb05
access.redhat.com/errata/RHSA-2015:2393
access.redhat.com/security/cve/CVE-2015-3182
github.com/advisories/GHSA-p39p-p27m-9c4h
security-tracker.debian.org/tracker/CVE-2015-3182
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1163581
bugzilla.redhat.com/show_bug.cgi?id=1163582
bugzilla.redhat.com/show_bug.cgi?id=1163583
bugzilla.redhat.com/show_bug.cgi?id=1163584
bugzilla.redhat.com/show_bug.cgi?id=1180182
bugzilla.redhat.com/show_bug.cgi?id=1180195
bugzilla.redhat.com/show_bug.cgi?id=1180197
bugzilla.redhat.com/show_bug.cgi?id=1199163
bugzilla.redhat.com/show_bug.cgi?id=1199165
bugzilla.redhat.com/show_bug.cgi?id=1199167
bugzilla.redhat.com/show_bug.cgi?id=1222434
bugzilla.redhat.com/show_bug.cgi?id=1222436
bugzilla.redhat.com/show_bug.cgi?id=1222437
bugzilla.redhat.com/show_bug.cgi?id=1222438
bugzilla.redhat.com/show_bug.cgi?id=1253354
bugzilla.redhat.com/show_bug.cgi?id=1253355
bugzilla.redhat.com/show_bug.cgi?id=1253356
bugzilla.redhat.com/show_bug.cgi?id=1253357
bugzilla.redhat.com/show_bug.cgi?id=1253360
bugzilla.redhat.com/show_bug.cgi?id=1267959
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2393.json
access.redhat.com/security/cve/CVE-2014-8710
cve.org/CVERecord?id=CVE-2014-8710
nvd.nist.gov/vuln/detail/CVE-2014-8710
wireshark.org/security/wnpa-sec-2014-20.html
access.redhat.com/security/cve/CVE-2014-8711
cve.org/CVERecord?id=CVE-2014-8711
nvd.nist.gov/vuln/detail/CVE-2014-8711
wireshark.org/security/wnpa-sec-2014-21.html
access.redhat.com/security/cve/CVE-2014-8712
cve.org/CVERecord?id=CVE-2014-8712
nvd.nist.gov/vuln/detail/CVE-2014-8712
wireshark.org/security/wnpa-sec-2014-22.html
access.redhat.com/security/cve/CVE-2014-8713
cve.org/CVERecord?id=CVE-2014-8713
nvd.nist.gov/vuln/detail/CVE-2014-8713
access.redhat.com/security/cve/CVE-2014-8714
cve.org/CVERecord?id=CVE-2014-8714
nvd.nist.gov/vuln/detail/CVE-2014-8714
wireshark.org/security/wnpa-sec-2014-23.html
access.redhat.com/security/cve/CVE-2015-0562
cve.org/CVERecord?id=CVE-2015-0562
nvd.nist.gov/vuln/detail/CVE-2015-0562
wireshark.org/security/wnpa-sec-2015-03.html
access.redhat.com/security/cve/CVE-2015-0563
cve.org/CVERecord?id=CVE-2015-0563
nvd.nist.gov/vuln/detail/CVE-2015-0563
wireshark.org/security/wnpa-sec-2015-04.html
access.redhat.com/security/cve/CVE-2015-0564
cve.org/CVERecord?id=CVE-2015-0564
nvd.nist.gov/vuln/detail/CVE-2015-0564
wireshark.org/security/wnpa-sec-2015-05.html
access.redhat.com/security/cve/CVE-2015-2188
cve.org/CVERecord?id=CVE-2015-2188
nvd.nist.gov/vuln/detail/CVE-2015-2188
access.redhat.com/security/cve/CVE-2015-2189
cve.org/CVERecord?id=CVE-2015-2189
nvd.nist.gov/vuln/detail/CVE-2015-2189
access.redhat.com/security/cve/CVE-2015-2191
cve.org/CVERecord?id=CVE-2015-2191
nvd.nist.gov/vuln/detail/CVE-2015-2191
cve.org/CVERecord?id=CVE-2015-3182
access.redhat.com/security/cve/CVE-2015-3810
cve.org/CVERecord?id=CVE-2015-3810
nvd.nist.gov/vuln/detail/CVE-2015-3810
wireshark.org/security/wnpa-sec-2015-13.html
access.redhat.com/security/cve/CVE-2015-3811
cve.org/CVERecord?id=CVE-2015-3811
nvd.nist.gov/vuln/detail/CVE-2015-3811
wireshark.org/security/wnpa-sec-2015-14.html
access.redhat.com/security/cve/CVE-2015-3812
cve.org/CVERecord?id=CVE-2015-3812
nvd.nist.gov/vuln/detail/CVE-2015-3812
wireshark.org/security/wnpa-sec-2015-15.html
access.redhat.com/security/cve/CVE-2015-3813
cve.org/CVERecord?id=CVE-2015-3813
nvd.nist.gov/vuln/detail/CVE-2015-3813
wireshark.org/security/wnpa-sec-2015-16.html
access.redhat.com/security/cve/CVE-2015-6243
cve.org/CVERecord?id=CVE-2015-6243
nvd.nist.gov/vuln/detail/CVE-2015-6243
wireshark.org/security/wnpa-sec-2015-23
access.redhat.com/security/cve/CVE-2015-6244
cve.org/CVERecord?id=CVE-2015-6244
nvd.nist.gov/vuln/detail/CVE-2015-6244
wireshark.org/security/wnpa-sec-2015-24
access.redhat.com/security/cve/CVE-2015-6245
cve.org/CVERecord?id=CVE-2015-6245
nvd.nist.gov/vuln/detail/CVE-2015-6245
wireshark.org/security/wnpa-sec-2015-25
access.redhat.com/security/cve/CVE-2015-6246
cve.org/CVERecord?id=CVE-2015-6246
nvd.nist.gov/vuln/detail/CVE-2015-6246
wireshark.org/security/wnpa-sec-2015-26
access.redhat.com/security/cve/CVE-2015-6248
cve.org/CVERecord?id=CVE-2015-6248
nvd.nist.gov/vuln/detail/CVE-2015-6248
wireshark.org/security/wnpa-sec-2015-28
ubuntu.com/security/CVE-2015-3182