CVE-2015-7830

The pcapng_read_if_descr_block function in wiretap/pcapng.c in the pcapng parser in Wireshark 1.12.x before 1.12.8 uses too many levels of pointer indirection, which allows remote attackers to cause a denial of service (incorrect free and application crash) via a crafted packet that triggers interface-filter copying.

• CWE-20

• http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html
• http://www.debian.org/security/2016/dsa-3505
• http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlThird Party Advisory
• http://www.securityfocus.com/bid/77101
• http://www.securityfocus.com/bid/78723
• http://www.securitytracker.com/id/1033953
• http://www.wireshark.org/security/wnpa-sec-2015-30.htmlVendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-15-624
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11455Issue Tracking, Vendor Advisory
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=72497918b16b706c3ba75e1f731f58b802ca14d1
• http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html
• http://www.debian.org/security/2016/dsa-3505
• http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlThird Party Advisory
• http://www.securityfocus.com/bid/77101
• http://www.securityfocus.com/bid/78723
• http://www.securitytracker.com/id/1033953
• http://www.wireshark.org/security/wnpa-sec-2015-30.htmlVendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-15-624
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11455Issue Tracking, Vendor Advisory
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=72497918b16b706c3ba75e1f731f58b802ca14d1

Published

Nov 15, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7824botan 1.11.x before 1.11.22 makes it easier for remote attac…
• CVE-2015-7825botan before 1.11.22 improperly validates certificate paths,…
• CVE-2015-7826botan 1.11.x before 1.11.22 improperly handles wildcard matc…
• CVE-2015-7827Botan before 1.10.13 and 1.11.x before 1.11.22 make it easie…
• CVE-2015-7828SAP HANA Database 1.00 SPS10 and earlier do not require auth…
• CVE-2015-7829Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before…
• CVE-2015-7831In Cloudera Hue, there is privilege escalation by a read-onl…8.8
• CVE-2015-7833The usbvision driver in the Linux kernel package 3.10.0-123.…
• CVE-2015-7834Multiple unspecified vulnerabilities in Google V8 before 4.6…
• CVE-2015-7835The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 throug…
• CVE-2015-7836Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers t…
• CVE-2015-7837The Linux kernel, as used in Red Hat Enterprise Linux 7, ker…