Every CVESearch/Get API key

CVE-2015-6243

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles...

4.3 MediumFix available

CVE-2015-6243 is a medium vulnerability (CVSS 4.3) in Wireshark, published August 24, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.96%, the 87th percentile. Fixed in wireshark 1.12.7+g7fc8978-1.

What does this mean?
Severity
4.3 MediumCVSS 2.0, NVD
Exploit chance
2.96%EPSS, 87th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.12.7+g7fc8978-1wireshark +33 more

Description

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.

Exploit likelihood

2.96%Up 0.8 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wireshark
Debian:12
before 1.12.7+g7fc8978-1
1.12.7+g7fc8978-1
wireshark
Debian:13
before 1.12.7+g7fc8978-1
1.12.7+g7fc8978-1
wireshark
Debian:14
before 1.12.7+g7fc8978-1
1.12.7+g7fc8978-1
wireshark
Debian:7
From an advisory covering 45 CVEs
before 1.12.1+g01b65bf-4+deb8u6~deb7u1, plus listed versions
1.10.0-11.10.0-21.10.0-2~bpo70+11.10.0~rc1-11.10.0~rc2-1
Show 45 moreShow less
1.10.1-11.10.1-1~bpo70+11.10.2-11.10.2-1~bpo70+11.10.2-21.10.3-11.10.3-1~bpo70+11.10.4-11.10.5-11.10.5-1~bpo70+11.10.5-21.10.6-11.10.6-1~bpo70+11.10.7-11.10.7-1~bpo70+11.10.7-21.10.7-31.10.7-41.10.8-11.10.8-1~bpo70+11.12.0+git+4fab41a1-11.12.0~rc1-11.12.0~rc1-21.12.0~rc2+git+fd017ee+dfsg1-11.12.0~rc3+git+e14d5b6eaa+dfsg1-11.12.1+g01b65bf-11.12.1+g01b65bf-1~bpo70+11.12.1+g01b65bf-21.12.1+g01b65bf-2~bpo70+11.12.1+g01b65bf-31.12.1+g01b65bf-41.12.1+g01b65bf-4~bpo70+11.8.2-5wheezy101.8.2-5wheezy111.8.2-5wheezy121.8.2-5wheezy131.8.2-5wheezy141.8.2-5wheezy151.8.2-5wheezy15~deb6u11.8.2-5wheezy161.8.2-5wheezy16~deb6u11.8.2-5wheezy171.8.2-5wheezy181.8.2-5wheezy21.8.2-5wheezy3
1.12.1+g01b65bf-4+deb8u6~deb7u1
wireshark
Debian:8
From an advisory covering 9 CVEs
before 1.12.1+g01b65bf-4+deb8u3, plus listed versions
1.12.1+g01b65bf-41.12.1+g01b65bf-4+deb8u11.12.1+g01b65bf-4+deb8u2
1.12.1+g01b65bf-4+deb8u3
wireshark-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 21 CVEs
before 0:1.10.14-7.el7
0:1.10.14-7.el7
wireshark-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 21 CVEs
before 0:1.10.14-7.el7
0:1.10.14-7.el7
wireshark
Red Hat:enterprise_linux:7::client
From an advisory covering 21 CVEs
before 0:1.10.14-7.el7
0:1.10.14-7.el7
wireshark-gnome
Red Hat:enterprise_linux:7::client
From an advisory covering 21 CVEs
before 0:1.10.14-7.el7
0:1.10.14-7.el7
wireshark-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 21 CVEs
before 0:1.10.14-7.el7
0:1.10.14-7.el7
Show 24 moreShow less
Affected packages
PackageAffectedFixed
wireshark-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 21 CVEs
before 0:1.10.14-7.el7
0:1.10.14-7.el7
wireshark
Red Hat:enterprise_linux:7::server
From an advisory covering 21 CVEs
before 0:1.10.14-7.el7
0:1.10.14-7.el7
wireshark-gnome
Red Hat:enterprise_linux:7::server
From an advisory covering 21 CVEs
before 0:1.10.14-7.el7
0:1.10.14-7.el7
wireshark-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 21 CVEs
before 0:1.10.14-7.el7
0:1.10.14-7.el7
wireshark-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 21 CVEs
before 0:1.10.14-7.el7
0:1.10.14-7.el7
wireshark
Red Hat:enterprise_linux:7::workstation
From an advisory covering 21 CVEs
before 0:1.10.14-7.el7
0:1.10.14-7.el7
wireshark-gnome
Red Hat:enterprise_linux:7::workstation
From an advisory covering 21 CVEs
before 0:1.10.14-7.el7
0:1.10.14-7.el7
wireshark
SUSE:Linux Enterprise Software Development Kit 11 SP3
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Software Development Kit 11 SP4
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Server 11 SP3
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Server 11 SP3-TERADATA
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Server for SAP Applications 11 SP3
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Desktop 11 SP3
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Desktop 11 SP4
From an advisory covering 11 CVEs
before 1.12.7-0.5.3
1.12.7-0.5.3
wireshark
SUSE:Linux Enterprise Desktop 12
From an advisory covering 10 CVEs
before 1.12.7-15.1
1.12.7-15.1
wireshark
SUSE:Linux Enterprise Software Development Kit 12
From an advisory covering 10 CVEs
before 1.12.7-15.1
1.12.7-15.1
wireshark
SUSE:Linux Enterprise Server 12
From an advisory covering 10 CVEs
before 1.12.7-15.1
1.12.7-15.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 10 CVEs
before 1.12.7-15.1
1.12.7-15.1
wireshark
Ubuntu:14.04:LTS
before 2.6.3-1~ubuntu14.04.1, plus listed versions
1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-11.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1
2.6.3-1~ubuntu14.04.1
wireshark
Ubuntu:16.04:LTS
before 2.6.3-1~ubuntu16.04.1, plus listed versions
1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04
2.6.3-1~ubuntu16.04.1
wireshark
Ubuntu:18.04:LTS
before 2.6.3-1~ubuntu18.04.1, plus listed versions
2.4.2-12.4.3-12.4.4-12.4.5-1
2.6.3-1~ubuntu18.04.1
wireshark
openSUSE:Tumbleweed
From an advisory covering 262 CVEs
before 2.2.2-1.1
2.2.2-1.1

What each source reports

NVD Score used4.3

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.

Record
CVE-2015-6243
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.

Record
CVE-2015-6243
Updated
2026-11-02
EUVDEUVD-2015-6185No score

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.

Record
EUVD-2015-6185
Updated
2026-11-03
GitHub AdvisoriesGHSA-wmr9-678w-f2ghNo score

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles...

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.

Record
GHSA-wmr9-678w-f2gh
Weakness
CWE-20
Updated
2026-11-02
OSVNo score

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.

Record
CVE-2015-6243
Updated
2026-11-02
OSVDEBIAN-CVE-2015-6243No score

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.

Record
DEBIAN-CVE-2015-6243
Updated
2026-11-02
Show 5 moreShow less
OSVopenSUSE-SU-2024:10199-1No score

wireshark-2.2.2-1.1 on GA media

These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10199-1
Updated
2026-11-02
OSVSUSE-SU-2015:1676-1No score

Security update for wireshark

Wireshark has been updated to 1.12.7. (FATE#319388)

The following vulnerabilities have been fixed:

  • Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241
  • Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242
  • Wireshark could crash when searching for a protocol dissector. wnpa-sec-2015-23 CVE-2015-6243
  • The ZigBee dissector could crash. wnpa-sec-2015-24 CVE-2015-6244
  • The GSM RLC/MAC dissector could go into an infinite loop. wnpa-sec-2015-25 CVE-2015-6245
  • The WaveAgent dissector could crash. wnpa-sec-2015-26 CVE-2015-6246
  • The OpenFlow dissector could go into an infinite loop. wnpa-sec-2015-27 CVE-2015-6247
  • Wireshark could crash due to invalid ptvcursor length checking. wnpa-sec-2015-28 CVE-2015-6248
  • The WCCP dissector could crash. wnpa-sec-2015-29 CVE-2015-6249
  • Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html

Also a fix from 1.12.6 in GSM DTAP was backported. (bnc#935158 CVE-2015-4652)

Record
SUSE-SU-2015:1676-1
Updated
2026-11-02
OSVSUSE-SU-2015:1676-2No score

Security update for wireshark

Wireshark has been updated to 1.12.7. (FATE#319388)

The following vulnerabilities have been fixed:

  • Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241
  • Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242
  • Wireshark could crash when searching for a protocol dissector. wnpa-sec-2015-23 CVE-2015-6243
  • The ZigBee dissector could crash. wnpa-sec-2015-24 CVE-2015-6244
  • The GSM RLC/MAC dissector could go into an infinite loop. wnpa-sec-2015-25 CVE-2015-6245
  • The WaveAgent dissector could crash. wnpa-sec-2015-26 CVE-2015-6246
  • The OpenFlow dissector could go into an infinite loop. wnpa-sec-2015-27 CVE-2015-6247
  • Wireshark could crash due to invalid ptvcursor length checking. wnpa-sec-2015-28 CVE-2015-6248
  • The WCCP dissector could crash. wnpa-sec-2015-29 CVE-2015-6249
  • Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html

Also a fix from 1.12.6 in GSM DTAP was backported. (bnc#935158 CVE-2015-4652)

Record
SUSE-SU-2015:1676-2
Updated
2026-11-02
OSVSUSE-SU-2015:1713-1No score

Security update for wireshark

Wireshark has been updated to 1.12.7. (FATE#319388)

The following vulnerabilities have been fixed:

  • Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 CVE-2015-6241
  • Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 CVE-2015-6242
  • Wireshark could crash when searching for a protocol dissector. wnpa-sec-2015-23 CVE-2015-6243
  • The ZigBee dissector could crash. wnpa-sec-2015-24 CVE-2015-6244
  • The GSM RLC/MAC dissector could go into an infinite loop. wnpa-sec-2015-25 CVE-2015-6245
  • The WaveAgent dissector could crash. wnpa-sec-2015-26 CVE-2015-6246
  • The OpenFlow dissector could go into an infinite loop. wnpa-sec-2015-27 CVE-2015-6247
  • Wireshark could crash due to invalid ptvcursor length checking. wnpa-sec-2015-28 CVE-2015-6248
  • The WCCP dissector could crash. wnpa-sec-2015-29 CVE-2015-6249
  • Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html

Also a fix from 1.12.6 in GSM DTAP was backported. (bnc#935158)

Record
SUSE-SU-2015:1713-1
Updated
2026-11-02
OSVUBUNTU-CVE-2015-6243No score

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.

Record
UBUNTU-CVE-2015-6243
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 13 versions and 185 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open