CVE-2015-2191: Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wir...

Security readout for executives and security teams

CVE-2015-2191 is a denial-of-service flaw in Wireshark's TNEF packet dissector. A specially crafted packet length field can make vulnerable Wireshark versions hang in an infinite loop. This affects analysis workstations more than production services, but it can disrupt incident response or monitoring workflows that inspect untrusted traffic. Exposure is most likely on systems running vulnerable Wireshark versions that open untrusted packet captures or inspect live traffic containing crafted TNEF data. Systems without Wireshark, or with Wireshark updated beyond the fixed versions, are not indicated as affected by the supplied sources. Treat this as a targeted operational resilience issue. It is not documented as code execution, but vulnerable Wireshark installations can be made unavailable during analysis. Prioritize remediation for security operations, network monitoring, and incident response systems that process untrusted traffic. Mitigation focus: Upgrade Wireshark to 1.10.13, 1.12.4, or a later supported release.; Apply distribution vendor packages from Debian, Red Hat, openSUSE, Mageia, Mandriva, Oracle, or Gentoo where applicable.; Avoid opening untrusted packet captures with vulnerable Wireshark builds..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.