{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2015-2188","sourceIdentifier":"cve@mitre.org","published":"2015-03-08T02:59:02.870","lastModified":"2026-06-17T00:23:43.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that is improperly handled during decompression."},{"lang":"es","value":"epan/dissectors/packet-wcp.c en el disector WCP en Wireshark 1.10.x anterior a 1.10.13 y 1.12.x anterior a 1.12.4 no inicializa correctamente una estructura de datos, lo que permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango y caída de la aplicación) a través de un paquete manipulado que no se maneja correctamente durante la decompresión."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"481435A6-4790-4B3E-8EEA-0394A6AB481A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"2B0BB28A-9E61-4073-9BE2-C34AB2BCF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.2:*:*:*:*:*:*:*","matchCriteriaId":"0753BF56-C829-48C3-AA6E-C0A2A1EA1124"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.3:*:*:*:*:*:*:*","matchCriteriaId":"EC206A02-8259-4FA0-8B6F-D8C58AB946C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.4:*:*:*:*:*:*:*","matchCriteriaId":"B973D7E1-523B-4AB9-965F-F8BBD2420CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.5:*:*:*:*:*:*:*","matchCriteriaId":"633AE75A-89BB-458D-9609-2C238DAC25C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.6:*:*:*:*:*:*:*","matchCriteriaId":"20A8D578-A2DD-4D08-81C1-E4437F40D21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.7:*:*:*:*:*:*:*","matchCriteriaId":"C0BBB2FB-A3D3-4D9F-88CB-F3D74395D364"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.8:*:*:*:*:*:*:*","matchCriteriaId":"A67E51FE-2B4A-4475-B829-316EDC24B88B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.9:*:*:*:*:*:*:*","matchCriteriaId":"3060B2B7-48CB-4669-BF65-4750D11CA401"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.10:*:*:*:*:*:*:*","matchCriteriaId":"2CA274E6-5CF8-46A1-A38C-2D9E26A8CDE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.11:*:*:*:*:*:*:*","matchCriteriaId":"55D76E3D-0CF1-4FAB-A243-793969CA83AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.10.12:*:*:*:*:*:*:*","matchCriteriaId":"49569E6A-7927-4767-9DFC-73F574E8499E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"29AC5E99-9C21-4C2E-AE68-A4B887318577"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"B90C8934-01D8-4027-8A38-0B3230CC5077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"49C89A62-69E2-40C5-9C75-FA6601A935A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"1946DDC9-E49F-4601-8448-E73B0480C880"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mageia:mageia:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F805A106-9A6F-48E7-8582-D3C5A26DFC11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0117.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00038.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3210","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:183","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72942","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1031858","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-07.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10844","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b204ff4846fe84b7789893c6b1d9afbdecac5b5d","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201510-03","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0117.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1031858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2015-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b204ff4846fe84b7789893c6b1d9afbdecac5b5d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201510-03","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}