CVE-2015-3814: The (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet-ieee80211.c in...

Security readout for executives and security teams

This CVE is a denial-of-service flaw in Wireshark's IEEE 802.11 packet parser. A crafted packet could make vulnerable Wireshark versions loop indefinitely, potentially freezing analysis workstations or monitoring workflows. It is old and affects only specified 1.10.x and 1.12.x releases before the fixed versions. Exposure is most likely where vulnerable Wireshark builds analyze IEEE 802.11 traffic or packet captures from untrusted sources. Current systems using later Wireshark versions should not be affected by the described vulnerable release ranges. Treat this as a legacy exposure cleanup item unless vulnerable Wireshark versions remain in active use. It can disrupt packet analysis but the provided evidence indicates denial of service only, not system compromise. Mitigation focus: Upgrade Wireshark to 1.10.14, 1.12.5, or a later supported release.; Apply distribution vendor updates from Debian, Gentoo, Oracle, or relevant package maintainers.; Avoid analyzing untrusted wireless captures with vulnerable Wireshark versions..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.