Published: 03/02/2013 Updated: 19/09/2017

CVSS v2 Base Score: 2.9 | Impact Score: 2.9 | Exploitability Score: 5.5

VMScore: 258

Vector: AV:A/AC:M/Au:N/C:N/I:N/A:P

The fragment_set_tot_len function in epan/reassemble.c in Wireshark 1.6.x prior to 1.6.13 and 1.8.x prior to 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote malicious users to cause a denial of service (application crash) via a malformed packet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 1.6.1
wireshark wireshark 1.6.2
wireshark wireshark 1.6.9
wireshark wireshark 1.6.10
wireshark wireshark 1.6.0
wireshark wireshark 1.6.7
wireshark wireshark 1.6.8
wireshark wireshark 1.6.3
wireshark wireshark 1.6.4
wireshark wireshark 1.6.11
wireshark wireshark 1.6.12
wireshark wireshark 1.6.5
wireshark wireshark 1.6.6
wireshark wireshark 1.8.3
wireshark wireshark 1.8.4
wireshark wireshark 1.8.1
wireshark wireshark 1.8.2
wireshark wireshark 1.8.0

Debian Bug report logs - #776135 wireshark: Multiple security issues in 1122 and prior versions Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: balint@balintreczeyhu Date: Sat, 24 Jan 2015 10:51:01 UTC Severity: ...

Debian Bug report logs - #780372 CVE-2015-2187 CVE-2015-2188 CVE-2015-2189 CVE-2015-2190 CVE-2015-2191 CVE-2015-2192 Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Th ...

Multiple vulnerabilities were discovered in the dissectors for the CLNP, DTLS, DCP-ETSI and NTLMSSP protocols, which could result in denial of service or the execution of arbitrary code For the stable distribution (squeeze), these problems have been fixed in version 1211-6+squeeze9 For the unstable distribution (sid), these problems will be fix ...

NVD-CWE-noinfo http://anonsvn.wireshark.org/viewvc?view=revision&revision=46999 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8111 http://www.wireshark.org/security/wnpa-sec-2013-05.html http://anonsvn.wireshark.org/viewvc/trunk/epan/reassemble.c?r1=46999&r2=46998&pathrev=46999 http://www.debian.org/security/2013/dsa-2625 http://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16048 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776135 https://www.debian.org/security/./dsa-2625

CVE-2013-1586

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect