CVE-2015-6249
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP...
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Exploit likelihood
What each source reports
NVD Score used
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
CVE-2015-6249- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
CVE-2015-6249- Updated
- 2026-11-02
EUVDEUVD-2015-6191 No score
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
EUVD-2015-6191- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxwc-8p4f-87mq No score
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP...
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
GHSA-xxwc-8p4f-87mq- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
CVE-2015-6249- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-6249 No score
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
DEBIAN-CVE-2015-6249- Updated
- 2026-11-02
Show 5 moreShow less
OSVopenSUSE-SU-2024:10199-1 No score
wireshark-2.2.2-1.1 on GA media
These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10199-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1676-1 No score
Security update for wireshark
Wireshark has been updated to 1.12.7. (FATE#319388)
The following vulnerabilities have been fixed:
- Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241
- Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242
- Wireshark could crash when searching for a protocol dissector. wnpa-sec-2015-23 CVE-2015-6243
- The ZigBee dissector could crash. wnpa-sec-2015-24 CVE-2015-6244
- The GSM RLC/MAC dissector could go into an infinite loop. wnpa-sec-2015-25 CVE-2015-6245
- The WaveAgent dissector could crash. wnpa-sec-2015-26 CVE-2015-6246
- The OpenFlow dissector could go into an infinite loop. wnpa-sec-2015-27 CVE-2015-6247
- Wireshark could crash due to invalid ptvcursor length checking. wnpa-sec-2015-28 CVE-2015-6248
- The WCCP dissector could crash. wnpa-sec-2015-29 CVE-2015-6249
- Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html
Also a fix from 1.12.6 in GSM DTAP was backported. (bnc#935158 CVE-2015-4652)
- Record
SUSE-SU-2015:1676-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1676-2 No score
Security update for wireshark
Wireshark has been updated to 1.12.7. (FATE#319388)
The following vulnerabilities have been fixed:
- Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241
- Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242
- Wireshark could crash when searching for a protocol dissector. wnpa-sec-2015-23 CVE-2015-6243
- The ZigBee dissector could crash. wnpa-sec-2015-24 CVE-2015-6244
- The GSM RLC/MAC dissector could go into an infinite loop. wnpa-sec-2015-25 CVE-2015-6245
- The WaveAgent dissector could crash. wnpa-sec-2015-26 CVE-2015-6246
- The OpenFlow dissector could go into an infinite loop. wnpa-sec-2015-27 CVE-2015-6247
- Wireshark could crash due to invalid ptvcursor length checking. wnpa-sec-2015-28 CVE-2015-6248
- The WCCP dissector could crash. wnpa-sec-2015-29 CVE-2015-6249
- Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html
Also a fix from 1.12.6 in GSM DTAP was backported. (bnc#935158 CVE-2015-4652)
- Record
SUSE-SU-2015:1676-2- Updated
- 2026-11-02
OSVSUSE-SU-2015:1713-1 No score
Security update for wireshark
Wireshark has been updated to 1.12.7. (FATE#319388)
The following vulnerabilities have been fixed:
- Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241
- Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242
- Wireshark could crash when searching for a protocol dissector. wnpa-sec-2015-23 CVE-2015-6243
- The ZigBee dissector could crash. wnpa-sec-2015-24 CVE-2015-6244
- The GSM RLC/MAC dissector could go into an infinite loop. wnpa-sec-2015-25 CVE-2015-6245
- The WaveAgent dissector could crash. wnpa-sec-2015-26 CVE-2015-6246
- The OpenFlow dissector could go into an infinite loop. wnpa-sec-2015-27 CVE-2015-6247
- Wireshark could crash due to invalid ptvcursor length checking. wnpa-sec-2015-28 CVE-2015-6248
- The WCCP dissector could crash. wnpa-sec-2015-29 CVE-2015-6249
- Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html
Also a fix from 1.12.6 in GSM DTAP was backported. (bnc#935158)
- Record
SUSE-SU-2015:1713-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-6249 No score
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- Record
UBUNTU-CVE-2015-6249- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 1.12.7+g7fc8978-1 | 1.12.7+g7fc8978-1 |
wiresharkDebian:13 |
before 1.12.7+g7fc8978-1 | 1.12.7+g7fc8978-1 |
wiresharkDebian:14 |
before 1.12.7+g7fc8978-1 | 1.12.7+g7fc8978-1 |
wiresharkDebian:8 From an advisory covering 9 CVEs |
before 1.12.1+g01b65bf-4+deb8u3, plus listed versions 1.12.1+g01b65bf-41.12.1+g01b65bf-4+deb8u11.12.1+g01b65bf-4+deb8u2 |
1.12.1+g01b65bf-4+deb8u3 |
wiresharkSUSE:Linux Enterprise Software Development Kit 11 SP3 From an advisory covering 11 CVEs |
before 1.12.7-0.5.3 | 1.12.7-0.5.3 |
wiresharkSUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 11 CVEs |
before 1.12.7-0.5.3 | 1.12.7-0.5.3 |
wiresharkSUSE:Linux Enterprise Server 11 SP3 From an advisory covering 11 CVEs |
before 1.12.7-0.5.3 | 1.12.7-0.5.3 |
wiresharkSUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 11 CVEs |
before 1.12.7-0.5.3 | 1.12.7-0.5.3 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 11 SP3 From an advisory covering 11 CVEs |
before 1.12.7-0.5.3 | 1.12.7-0.5.3 |
wiresharkSUSE:Linux Enterprise Server 11 SP4 From an advisory covering 11 CVEs |
before 1.12.7-0.5.3 | 1.12.7-0.5.3 |
Show 11 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkSUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 11 CVEs |
before 1.12.7-0.5.3 | 1.12.7-0.5.3 |
wiresharkSUSE:Linux Enterprise Desktop 11 SP3 From an advisory covering 11 CVEs |
before 1.12.7-0.5.3 | 1.12.7-0.5.3 |
wiresharkSUSE:Linux Enterprise Desktop 11 SP4 From an advisory covering 11 CVEs |
before 1.12.7-0.5.3 | 1.12.7-0.5.3 |
wiresharkSUSE:Linux Enterprise Desktop 12 From an advisory covering 10 CVEs |
before 1.12.7-15.1 | 1.12.7-15.1 |
wiresharkSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 10 CVEs |
before 1.12.7-15.1 | 1.12.7-15.1 |
wiresharkSUSE:Linux Enterprise Server 12 From an advisory covering 10 CVEs |
before 1.12.7-15.1 | 1.12.7-15.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 10 CVEs |
before 1.12.7-15.1 | 1.12.7-15.1 |
wiresharkUbuntu:14.04:LTS |
before 2.6.3-1~ubuntu14.04.1, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-11.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1 |
2.6.3-1~ubuntu14.04.1 |
wiresharkUbuntu:16.04:LTS |
before 2.6.3-1~ubuntu16.04.1, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 |
2.6.3-1~ubuntu16.04.1 |
wiresharkUbuntu:18.04:LTS |
before 2.6.3-1~ubuntu18.04.1, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-1 |
2.6.3-1~ubuntu18.04.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 262 CVEs |
before 2.2.2-1.1 | 2.2.2-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-6249 is a medium vulnerability (CVSS 4.3) in Wireshark, published August 24, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.84%, the 86th percentile. Fixed in wireshark 1.12.7+g7fc8978-1.
References
wireshark.org/security/wnpa-sec-2015-29.html
lists.fedoraproject.org/pipermail/package-announce/2015-October/168837.html
securitytracker.com/id/1033272
bugs.wireshark.org/bugzilla/show_bug.cgi?id=11358
code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b1eaf29d4056f05d1bd6a7f3d692553ec069a228
Show 194 moreShow less
debian.org/security/2015/dsa-3367
lists.opensuse.org/opensuse-updates/2015-10/msg00053.html
oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
nvd.nist.gov/vuln/detail/CVE-2015-6249
github.com/advisories/GHSA-xxwc-8p4f-87mq
security-tracker.debian.org/tracker/CVE-2015-6249
suse.com/support/update/announcement/2015/suse-su-20151676-1
bugzilla.suse.com/935158
ubuntu.com/security/CVE-2015-6249
cve.org/CVERecord?id=CVE-2015-6249
Left out here: 82 references. The JSON record has them.