CVE-2013-3561 - Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial

CVE-2013-3561

Summary

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector.

References

Vulnerable Configurations

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.3:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.3:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.4:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.4:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.5:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.5:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.6:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.6:*:*:*:*:*:*:*

CVSS

Base:	7.8 (as of 30-10-2018 - 16:27)
Impact:
Exploitability:

CWE

CWE-189

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:C

oval via4

accepted

2013-07-08T04:01:58.375-04:00

class

vulnerability

contributors

name	Shane Shaffer
organization	G2, Inc.

definition_extensions

comment	Wireshark is installed on the system.
oval	oval:org.mitre.oval:def:6589

description

family

windows

oval:org.mitre.oval:def:16755

status

accepted

submitted

2013-05-28T11:47:30.580-04:00

title

Multiple integer overflows in Wireshark 1.8.x before 1.8.7

version

redhat via4

rpms

wireshark-0:1.8.10-4.el6
wireshark-debuginfo-0:1.8.10-4.el6
wireshark-devel-0:1.8.10-4.el6
wireshark-gnome-0:1.8.10-4.el6

refmap via4

confirm	http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-etch.c?r1=48919&r2=48918&pathrev=48919 http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mysql.c?r1=48894&r2=48893&pathrev=48894 http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-websocket.c?r1=48336&r2=48335&pathrev=48336 http://anonsvn.wireshark.org/viewvc?view=revision&revision=48336 http://anonsvn.wireshark.org/viewvc?view=revision&revision=48894 http://anonsvn.wireshark.org/viewvc?view=revision&revision=48919 http://www.wireshark.org/security/wnpa-sec-2013-29.html http://www.wireshark.org/security/wnpa-sec-2013-30.html http://www.wireshark.org/security/wnpa-sec-2013-31.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8448 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8458 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8464
gentoo	GLSA-201308-05
secunia	53425 54425
suse	openSUSE-SU-2013:0911 openSUSE-SU-2013:0947 openSUSE-SU-2013:1084 openSUSE-SU-2013:1086

Last major update

30-10-2018 - 16:27

Published

25-05-2013 - 03:18

Last modified

30-10-2018 - 16:27