{"id":"CVE-2015-3182","aliases":["DEBIAN-CVE-2015-3182","EUVD-2015-3252","GHSA-p39p-p27m-9c4h","RHSA-2015:2393","UBUNTU-CVE-2015-3182"],"status":"published","title":"epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1...","description":"epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01482,"percentile":0.74128,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2016-01-04T02:00:00Z","modified":"2026-09-09T07:00:42Z","fixes":[{"ecosystem":"Debian:12","package":"wireshark","fixed_in":["1.12.0~rc1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["1.12.0~rc1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["1.12.0~rc1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"wireshark","fixed_in":["2.6.3-1~ubuntu14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"wireshark","fixed_in":["2.6.3-1~ubuntu16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"wireshark","fixed_in":["2.6.3-1~ubuntu18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0~rc1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0~rc1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0~rc1-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.14-7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.14-7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.14-7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.14-7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.14-7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.14-7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.14-7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.14-7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.14-7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.14-7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.14-7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.14-7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1~ubuntu14.04.1"}]}],"versions":["1.10.2-1","1.10.3-1","1.10.5-1ubuntu1","1.10.5-2","1.10.6-1","1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1~ubuntu16.04.1"}]}],"versions":["1.12.7+g7fc8978-1","1.12.8+g5b6e543-2","2.0.1+g59ea380-3build1","2.0.2+ga16e22e-1","2.2.6+g32dac6a-2ubuntu0.16.04"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1~ubuntu18.04.1"}]}],"versions":["2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1"]}],"products":[{"vendor":"wireshark","product":"wireshark"}],"references":[{"url":"http://www.securitytracker.com/id/1032279","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1219409","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/74586","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201510-03","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=373deb5f4182a5c4ab8c8418a7bbaa5d6e72bb05","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3182","tags":["advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=373deb5f4182a5c4ab8c8418a7bbaa5d6e72bb05"},{"url":"https://access.redhat.com/errata/RHSA-2015:2393","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3182","tags":["report"]},{"url":"https://github.com/advisories/GHSA-p39p-p27m-9c4h"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-3182","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1163581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1163582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1163583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1163584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1222434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1222436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1222437","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1222438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1253354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1253355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1253356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1253357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1253360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1267959","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2393.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8710","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-20.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8711","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8711","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-21.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8712","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-22.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8713","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8713","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8714","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8714","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8714","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-23.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0562","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0562","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0562","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2015-03.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0563","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0563","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0563","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2015-04.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0564","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2015-05.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2188","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2188","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2189","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2189","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2189","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2191","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2191","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3182","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3810","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3810","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3810","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2015-13.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3811","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3811","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3811","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2015-14.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3812","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3812","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3812","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2015-15.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3813","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3813","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3813","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2015-16.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-6243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-6243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6243","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2015-23","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-6244","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-6244","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6244","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2015-24","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-6245","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-6245","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6245","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2015-25","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-6246","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-6246","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6246","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2015-26","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-6248","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-6248","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6248","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2015-28","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2015-3182","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-3182","description":"epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2016-01-04T02:00:00Z","modified":"2024-08-06T05:39:31.553Z","updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2015-3252","description":"epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2016-01-04T02:00:00Z","modified":"2024-08-06T05:39:31Z","updated_at":"2026-11-03T02:22:09.179399Z"}],"ghsa":[{"id":"GHSA-p39p-p27m-9c4h","title":"epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1...","description":"epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2022-05-17T02:38:49Z","modified":"2023-02-10T05:06:53Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:54:03.327923Z"}],"nvd":[{"id":"CVE-2015-3182","description":"epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2016-01-04T05:59:00.153Z","modified":"2026-06-17T00:25:28.817Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:15.746629Z"}],"osv":[{"id":"CVE-2015-3182","description":"epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2016-01-04T05:59:00Z","modified":"2026-04-10T03:46:16.722215Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-3182","description":"epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2016-01-04T05:59:00.153Z","modified":"2026-09-09T07:00:42.951147928Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"UBUNTU-CVE-2015-3182","description":"epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.","status":"published","published":"2016-01-04T05:59:00Z","modified":"2026-04-22T10:06:10.258747Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"RHSA-2015:2393","title":"Red Hat Security Advisory: wireshark security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:43:50Z","modified":"2026-06-26T12:21:50.158584395Z","updated_at":"2026-11-02T15:53:03.182161Z"}]}}