Published: 09/06/2013 Updated: 30/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x prior to 1.6.16 and 1.8.x prior to 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote malicious users to cause a denial of service (application crash) via a crafted packet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 1.6.0
wireshark wireshark 1.6.1
wireshark wireshark 1.6.8
wireshark wireshark 1.6.9
wireshark wireshark 1.6.2
wireshark wireshark 1.6.3
wireshark wireshark 1.6.10
wireshark wireshark 1.6.11
wireshark wireshark 1.6.6
wireshark wireshark 1.6.7
wireshark wireshark 1.6.15
wireshark wireshark 1.6.14
wireshark wireshark 1.6.4
wireshark wireshark 1.6.5
wireshark wireshark 1.6.12
wireshark wireshark 1.6.13
opensuse opensuse 11.4
opensuse opensuse 12.3
opensuse opensuse 12.2
debian debian linux 7.0
wireshark wireshark 1.8.3
wireshark wireshark 1.8.4
wireshark wireshark 1.8.5
wireshark wireshark 1.8.6
wireshark wireshark 1.8.1
wireshark wireshark 1.8.2
wireshark wireshark 1.8.0
wireshark wireshark 1.8.7

Multiple vulnerabilities were discovered in the dissectors for CAPWAP, GMR-1 BCCH, PPP, NBAP, RDP, HTTP, DCP ETSI and in the Ixia IxVeriWave file parser, which could result in denial of service or the execution of arbitrary code For the stable distribution (wheezy), these problems have been fixed in version 182-5wheezy4 For the unstable distrib ...

Debian Bug report logs - #776135 wireshark: Multiple security issues in 1122 and prior versions Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: balint@balintreczeyhu Date: Sat, 24 Jan 2015 10:51:01 UTC Severity: ...

Debian Bug report logs - #711918 wireshark: Multiple vulnerabilities in wireshark dissectors Package: src:wireshark; Maintainer for src:wireshark is Balint Reczey <rbalint@ubuntucom>; Reported by: Yves-Alexis Perez <corsac@debianorg> Date: Mon, 10 Jun 2013 21:30:02 UTC Severity: serious Fixed in versions wireshar ...

Debian Bug report logs - #780372 CVE-2015-2187 CVE-2015-2188 CVE-2015-2189 CVE-2015-2190 CVE-2015-2191 CVE-2015-2192 Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Th ...

# # This module requires Metasploit: http//metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit3 < Msf::Auxiliary include Msf::Exploit::Remote::Udp include Msf::Auxiliary::Dos def initialize(info = {}) super(update_info(info, 'Name' => 'Wi ...

CWE-189 http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8725 http://www.wireshark.org/docs/relnotes/wireshark-1.6.16.html http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-capwap.c?r1=43716&r2=43715&pathrev=43716 http://www.wireshark.org/security/wnpa-sec-2013-32.html http://anonsvn.wireshark.org/viewvc?view=revision&revision=43716 http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html http://www.debian.org/security/2013/dsa-2709 http://www.mandriva.com/security/advisories?name=MDVSA-2013:172 http://www.exploit-db.com/exploits/33556 http://osvdb.org/show/osvdb/94091 http://secunia.com/advisories/53762 http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml http://secunia.com/advisories/54425 http://packetstormsecurity.com/files/126848/Wireshark-CAPWAP-Dissector-Denial-Of-Service.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16698 https://nvd.nist.gov https://www.debian.org/security/./dsa-2709 https://www.exploit-db.com/exploits/33556/

CVE-2013-4074

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect