CVE-2015-8725

CVE-2015-8725 describes a stack-based buffer overflow vulnerability in the DIAMETER dissector of Wireshark versions 1.12.x before 1.12.9 and 2.0.x before 2.0.1. This flaw, specifically in the dissect_diameter_base_framed_ipv6_prefix function, arises from a lack of IPv6 prefix length validation, allowing a remote attacker to trigger a denial of service by crafting a malicious packet. Rated as Medium severity (CVSS 5.5), the vulnerability requires user interaction (UI:R) and local access (AV:L) to exploit, leading to an application crash. While not actively exploited in the wild and lacking significant community discussion or media coverage, an exploit proof-of-concept (EDB-39003) is publicly available.