CVE-2015-8742: The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark...

Security readout for executives and security teams

This is a denial-of-service flaw in Wireshark's MS-WSP dissector. A specially crafted packet could make vulnerable Wireshark 2.0.x versions before 2.0.1 consume memory or crash. Business impact is disruption to analysts or systems using Wireshark for packet inspection, not data theft or remote system takeover based on the provided sources. Exposure is likely limited to systems running Wireshark 2.0.x before 2.0.1 that process live traffic or packet captures containing crafted MS-WSP data. Security analyst workstations, lab systems, and monitoring hosts using that version are the main concern. Treat this as a targeted reliability risk for security tooling. Prioritize patching analyst and monitoring systems, especially where untrusted captures are handled. It is less urgent than a code-execution flaw, but crashes in packet analysis tools can disrupt incident response work. Mitigation focus: Upgrade Wireshark 2.0.x installations to 2.0.1 or later.; Apply vendor or distribution security updates, including relevant Gentoo advisories where applicable.; Avoid opening untrusted packet captures on vulnerable Wireshark versions..

Prepared

Jun 13, 2026, 21:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.