CVE-2015-8740 describes a stack-based buffer overflow vulnerability in the TDS dissector of Wireshark versions 2.0.x before 2.0.1. This flaw, residing in the dissect_tds7_colmetadata_token function, allows remote attackers to trigger a denial of service and application crash by sending a specially crafted packet that does not properly validate the number of columns. The vulnerability has a CVSS score of 5.3 (Medium), indicating an attack vector of Adjacent Network, High attack complexity, and a High impact on availability. There is no evidence of active exploitation, and while an ExploitDB entry exists for a similar Wireshark vulnerability (EDB-39003), it does not directly target CVE-2015-8740. Community discussion and media coverage for this specific CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.0.0CPE matchmatch criteria | cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.