CVE-2015-8718: Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1...

Security readout for executives and security teams

This flaw can make affected Wireshark installations crash when processing a specially crafted packet. It is a denial-of-service risk for packet analysts and automated capture-processing systems, not a documented remote code execution issue in the provided sources. Exposure is most likely where affected Wireshark versions inspect untrusted captures or live traffic with the async NLM matching option enabled. Enterprise risk is higher for analyst workstations, monitoring pipelines, and systems that automatically decode packet captures. Treat this as a timely maintenance fix for security operations tooling. It can disrupt investigations or monitoring through crashes, but the provided evidence supports denial of service only, with no confirmed active exploitation. Mitigation focus: Upgrade Wireshark to 1.12.9, 2.0.1, or a later vendor-supported release.; Apply relevant OS vendor security updates for packaged Wireshark builds.; Check whether async NLM MSG/RES matching is enabled on affected installations..

Prepared

Jun 13, 2026, 21:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.