CVE-2015-3813: The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x be...

Security readout for executives and security teams

This flaw can make vulnerable Wireshark installations consume excessive memory when processing a specially crafted packet. The practical business impact is denial of service for packet-analysis workstations or systems using affected Wireshark components, not data theft or code execution based on the provided sources. Exposure is most likely where vulnerable Wireshark 1.12.x installations analyze untrusted live traffic or packet captures. Security teams, network operations, and forensic analysts are the primary concern. The provided affected-product metadata is incomplete, but the CVE description names Wireshark 1.12.x before 1.12.5. Handle as a targeted availability risk for security and network teams. It is not shown as actively exploited and is not described as code execution, but affected tools may become unavailable during investigations. Remediate during normal vulnerability management, faster for systems handling hostile traffic. Mitigation focus: Upgrade Wireshark 1.12.x installations to 1.12.5 or later.; Apply relevant vendor packages from Debian, Red Hat, Gentoo, Oracle, or your distribution.; Limit analysis of untrusted captures on vulnerable systems until updated..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.