Published: 25/05/2013 Updated: 30/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x prior to 1.6.15 and 1.8.x prior to 1.8.7 does not properly initialize a certain variable, which allows remote malicious users to cause a denial of service (application crash) via a malformed packet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 1.6.2
wireshark wireshark 1.6.3
wireshark wireshark 1.6.10
wireshark wireshark 1.6.11
wireshark wireshark 1.6.4
wireshark wireshark 1.6.5
wireshark wireshark 1.6.12
wireshark wireshark 1.6.13
wireshark wireshark 1.6.0
wireshark wireshark 1.6.1
wireshark wireshark 1.6.8
wireshark wireshark 1.6.9
wireshark wireshark 1.6.6
wireshark wireshark 1.6.7
wireshark wireshark 1.6.14
wireshark wireshark 1.8.2
wireshark wireshark 1.8.3
wireshark wireshark 1.8.4
wireshark wireshark 1.8.5
wireshark wireshark 1.8.6
wireshark wireshark 1.8.0
wireshark wireshark 1.8.1
debian debian linux 7.0
opensuse opensuse 12.2
opensuse opensuse 12.3
opensuse opensuse 11.4

Synopsis Moderate: wireshark security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix multiple security issues, several bugs,and add various enhancements are now available for Red Hat EnterpriseLinux 6The Red Hat Security Response Team ha ...

Multiple vulnerabilities were discovered in the dissectors for GTPv2, ASN1 BER, PPP CCP, DCP ETSI, MPEG DSM-CC and Websocket, which could result in denial of service or the execution of arbitrary code The oldstable distribution (squeeze) is not affected For the stable distribution (wheezy), these problems have been fixed in version 182-5wheezy ...

Debian Bug report logs - #709167 wireshark: Security vulnerabilities fixed in 187 (CVE-2013-3555 to CVE-2013-3562) Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Henri Salo <henri@nervfi> Date: Tue, 21 May ...

Debian Bug report logs - #776135 wireshark: Multiple security issues in 1122 and prior versions Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: balint@balintreczeyhu Date: Sat, 24 Jan 2015 10:51:01 UTC Severity: ...

Debian Bug report logs - #780372 CVE-2015-2187 CVE-2015-2188 CVE-2015-2189 CVE-2015-2190 CVE-2015-2191 CVE-2015-2192 Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Th ...

Two flaws were found in Wireshark If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark (CVE-2013-3559, CVE-2013-4083) Several denial of service flaws were found in Wireshark Wireshark could crash or stop responding if it read a malfor ...

The dissect_ber_choice function in epan/dissectors/packet-berc in the ASN1 BER dissector in Wireshark 16x before 1615 and 18x before 187 does not properly initialize a certain variable, which allows remote attackers to cause a denial of service (application crash) via a malformed packet ...

CWE-119 http://anonsvn.wireshark.org/viewvc?view=revision&revision=48944 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8599 http://www.wireshark.org/security/wnpa-sec-2013-25.html http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ber.c?r1=48944&r2=48943&pathrev=48944 http://www.debian.org/security/2013/dsa-2700 http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:172 http://rhn.redhat.com/errata/RHSA-2014-0341.html https://www.wireshark.org/docs/relnotes/wireshark-1.6.15.html http://secunia.com/advisories/53425 http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml http://secunia.com/advisories/54425 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16521 https://access.redhat.com/errata/RHSA-2013:1569 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-3557 https://www.debian.org/security/./dsa-2700

Get Started

CVE-2013-3557

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect