Buffer Underflow Vulnerability in Wireshark SSL Decrypt Record Function

Buffer Underflow Vulnerability in Wireshark SSL Decrypt Record Function

CVE-2015-0564 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session.

Learn more about our Web Application Penetration Testing UK.