VYPR
High severity7.5NVD Advisory· Published Apr 24, 2017· Updated May 13, 2026

CVE-2015-1521

CVE-2015-1521

Description

analyzer/protocol/dnp3/DNP3.cc in Bro before 2.3.2 does not properly handle zero values of a packet length, which allows remote attackers to cause a denial of service (buffer overflow or buffer over-read if NDEBUG; otherwise assertion failure) via a crafted DNP3 packet.

Affected products

1
  • cpe:2.3:a:bro:bro:*:*:*:*:*:*:*:*
    Range: <=2.3.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.