CVE-2015-4651: The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in W...

Security readout for executives and security teams

CVE-2015-4651 is a Wireshark crash bug in the WCCP dissector. A specially crafted packet can make affected Wireshark 1.12.x versions before 1.12.6 crash. This is a denial-of-service issue for analysts or systems processing untrusted network traffic or capture files, not evidence of data theft or code execution. Exposure is most likely where Wireshark 1.12.x before 1.12.6 is installed and used to inspect untrusted live traffic or packet captures containing WCCP data. The source bundle does not identify broader affected products beyond Wireshark and downstream vendor packages. Handle as a reliability and security hygiene issue, especially for security operations environments. It can disrupt analysis tools but the supplied evidence does not support ransomware-like urgency, active exploitation, or compromise of sensitive data. Mitigation focus: Upgrade Wireshark 1.12.x installations to 1.12.6 or a vendor-fixed package.; Apply relevant Debian, openSUSE, Gentoo, or Oracle updates where those packages are used.; Prioritize analyst workstations and monitoring systems that process untrusted packet captures..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.