← back
CVE-2015-8735

CVE-2015-8735

EPSS 4.4%
The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (invalid write operation and application crash) via a crafted packet.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/38998unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11817https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=83bad0215dae54e77d34f8b187900125f672366ehttps://security.gentoo.org/glsa/201604-05http://www.securityfocus.com/bid/79382http://www.securitytracker.com/id/1034551http://www.wireshark.org/security/wnpa-sec-2015-53.html