Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.1
CVSSv2

CVE-2013-2486

Published: 07/03/2013 Updated: 30/10/2018
CVSS v2 Base Score: 6.1 | Impact Score: 6.9 | Exploitability Score: 6.5
VMScore: 543
Vector: AV:A/AC:L/Au:N/C:N/I:N/A:C
Subscribe to Opensuse

Vulnerability Summary

The dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x prior to 1.8.6 uses an incorrect integer data type, which allows remote malicious users to cause a denial of service (infinite loop) via crafted integer values in a packet.

Vulnerable Product Search on Vulmon Subscribe to Product

opensuse opensuse 12.3

opensuse opensuse 12.1

opensuse opensuse 12.2

debian debian linux 7.0

opensuse opensuse 11.4

wireshark wireshark 1.8.4

wireshark wireshark 1.8.5

wireshark wireshark 1.8.0

wireshark wireshark 1.8.1

wireshark wireshark 1.8.2

wireshark wireshark 1.8.3

Vendor Advisories

Debian CVElist Bug Report Logs: wireshark: Security vulnerabilities fixed in 1.8.7 (CVE-2013-3555 to CVE-2013-3562)
Debian Bug report logs - #709167 wireshark: Security vulnerabilities fixed in 187 (CVE-2013-3555 to CVE-2013-3562) Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Henri Salo <henri@nervfi> Date: Tue, 21 May ...

References

CWE-189http://anonsvn.wireshark.org/viewvc?view=revision&revision=47805http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-reload.c?r1=47805&r2=47804&pathrev=47805http://www.wireshark.org/security/wnpa-sec-2013-21.htmlhttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8364http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.htmlhttp://lists.opensuse.org/opensuse-updates/2013-03/msg00077.htmlhttp://lists.opensuse.org/opensuse-updates/2013-03/msg00065.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00083.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00048.htmlhttp://secunia.com/advisories/52471http://secunia.com/advisories/53425https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16109https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709167https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook