Wireshark vulnerability wnpa-sec-2015-05

Description

It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

Analysis

Wireshark could underflow a buffer while decypting TLS/SSL sessions. Discovered by Noam Rathaus.

Affected Applications

Wireshark

CVE References

CVE-2015-0564

Other References

https://www.wireshark.org/security/wnpa-sec-2015-05.html