Every CVESearch/Get API key

CVE-2015-6242

The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block...

4.3 MediumFix available

CVE-2015-6242 is a medium vulnerability (CVSS 4.3) in Wireshark, published August 24, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.81%, the 86th percentile. Fixed in wireshark 1.12.7+g7fc8978-1.

What does this mean?
Severity
4.3 MediumCVSS 2.0, NVD
Exploit chance
2.81%EPSS, 86th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.12.7+g7fc8978-1wireshark +20 more

Description

The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet.

Exploit likelihood

2.81%Up 0.8 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wireshark
Debian:12
before 1.12.7+g7fc8978-1
1.12.7+g7fc8978-1
wireshark
Debian:13
before 1.12.7+g7fc8978-1
1.12.7+g7fc8978-1
wireshark
Debian:14
before 1.12.7+g7fc8978-1
1.12.7+g7fc8978-1
wireshark
Debian:8
From an advisory covering 9 CVEs
before 1.12.1+g01b65bf-4+deb8u3, plus listed versions
1.12.1+g01b65bf-41.12.1+g01b65bf-4+deb8u11.12.1+g01b65bf-4+deb8u2
1.12.1+g01b65bf-4+deb8u3
wireshark
SUSE:Linux Enterprise Software Development Kit 11 SP3
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Software Development Kit 11 SP4
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Server 11 SP3
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Server 11 SP3-TERADATA
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Server for SAP Applications 11 SP3
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
Show 11 moreShow less
Affected packages
PackageAffectedFixed
wireshark
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Desktop 11 SP3
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Desktop 11 SP4
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Desktop 12
From an advisory covering 10 CVEs
before 1.12.7-15.1
1.12.7-15.1
wireshark
SUSE:Linux Enterprise Software Development Kit 12
From an advisory covering 10 CVEs
before 1.12.7-15.1
1.12.7-15.1
wireshark
SUSE:Linux Enterprise Server 12
From an advisory covering 10 CVEs
before 1.12.7-15.1
1.12.7-15.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 10 CVEs
before 1.12.7-15.1
1.12.7-15.1
wireshark
Ubuntu:14.04:LTS
before 2.6.3-1~ubuntu14.04.1, plus listed versions
1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-11.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1
2.6.3-1~ubuntu14.04.1
wireshark
Ubuntu:16.04:LTS
before 2.6.3-1~ubuntu16.04.1, plus listed versions
1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04
2.6.3-1~ubuntu16.04.1
wireshark
Ubuntu:18.04:LTS
before 2.6.3-1~ubuntu18.04.1, plus listed versions
2.4.2-12.4.3-12.4.4-12.4.5-1
2.6.3-1~ubuntu18.04.1
wireshark
openSUSE:Tumbleweed
From an advisory covering 262 CVEs
before 2.2.2-1.1
2.2.2-1.1

What each source reports

NVD Score used4.3

The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet.

Record
CVE-2015-6242
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet.

Record
CVE-2015-6242
Updated
2026-11-02
EUVDEUVD-2015-6184No score

The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet.

Record
EUVD-2015-6184
Updated
2026-11-03
GitHub AdvisoriesGHSA-cxr5-cqh9-cwrfNo score

The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block...

The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet.

Record
GHSA-cxr5-cqh9-cwrf
Weakness
CWE-20
Updated
2026-11-02
OSVNo score

The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet.

Record
CVE-2015-6242
Updated
2026-11-02
OSVDEBIAN-CVE-2015-6242No score

The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet.

Record
DEBIAN-CVE-2015-6242
Updated
2026-11-02
Show 5 moreShow less
OSVopenSUSE-SU-2024:10199-1No score

wireshark-2.2.2-1.1 on GA media

These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10199-1
Updated
2026-11-02
OSVSUSE-SU-2015:1676-1No score

Security update for wireshark

Wireshark has been updated to 1.12.7. (FATE#319388)

The following vulnerabilities have been fixed:

  • Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241
  • Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242
  • Wireshark could crash when searching for a protocol dissector. wnpa-sec-2015-23 CVE-2015-6243
  • The ZigBee dissector could crash. wnpa-sec-2015-24 CVE-2015-6244
  • The GSM RLC/MAC dissector could go into an infinite loop. wnpa-sec-2015-25 CVE-2015-6245
  • The WaveAgent dissector could crash. wnpa-sec-2015-26 CVE-2015-6246
  • The OpenFlow dissector could go into an infinite loop. wnpa-sec-2015-27 CVE-2015-6247
  • Wireshark could crash due to invalid ptvcursor length checking. wnpa-sec-2015-28 CVE-2015-6248
  • The WCCP dissector could crash. wnpa-sec-2015-29 CVE-2015-6249
  • Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html

Also a fix from 1.12.6 in GSM DTAP was backported. (bnc#935158 CVE-2015-4652)

Record
SUSE-SU-2015:1676-1
Updated
2026-11-02
OSVSUSE-SU-2015:1676-2No score

Security update for wireshark

Wireshark has been updated to 1.12.7. (FATE#319388)

The following vulnerabilities have been fixed:

  • Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241
  • Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242
  • Wireshark could crash when searching for a protocol dissector. wnpa-sec-2015-23 CVE-2015-6243
  • The ZigBee dissector could crash. wnpa-sec-2015-24 CVE-2015-6244
  • The GSM RLC/MAC dissector could go into an infinite loop. wnpa-sec-2015-25 CVE-2015-6245
  • The WaveAgent dissector could crash. wnpa-sec-2015-26 CVE-2015-6246
  • The OpenFlow dissector could go into an infinite loop. wnpa-sec-2015-27 CVE-2015-6247
  • Wireshark could crash due to invalid ptvcursor length checking. wnpa-sec-2015-28 CVE-2015-6248
  • The WCCP dissector could crash. wnpa-sec-2015-29 CVE-2015-6249
  • Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html

Also a fix from 1.12.6 in GSM DTAP was backported. (bnc#935158 CVE-2015-4652)

Record
SUSE-SU-2015:1676-2
Updated
2026-11-02
OSVSUSE-SU-2015:1713-1No score

Security update for wireshark

Wireshark has been updated to 1.12.7. (FATE#319388)

The following vulnerabilities have been fixed:

  • Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241
  • Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242
  • Wireshark could crash when searching for a protocol dissector. wnpa-sec-2015-23 CVE-2015-6243
  • The ZigBee dissector could crash. wnpa-sec-2015-24 CVE-2015-6244
  • The GSM RLC/MAC dissector could go into an infinite loop. wnpa-sec-2015-25 CVE-2015-6245
  • The WaveAgent dissector could crash. wnpa-sec-2015-26 CVE-2015-6246
  • The OpenFlow dissector could go into an infinite loop. wnpa-sec-2015-27 CVE-2015-6247
  • Wireshark could crash due to invalid ptvcursor length checking. wnpa-sec-2015-28 CVE-2015-6248
  • The WCCP dissector could crash. wnpa-sec-2015-29 CVE-2015-6249
  • Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html

Also a fix from 1.12.6 in GSM DTAP was backported. (bnc#935158)

Record
SUSE-SU-2015:1713-1
Updated
2026-11-02
OSVUBUNTU-CVE-2015-6242No score

The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet.

Record
UBUNTU-CVE-2015-6242
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 82 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open