CVE-2013-5718 in Wireshark
Summary
The dissect_nbap_T_dCH_ID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dch_id value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Reservation
09/11/2013
Disclosure
09/16/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 10266 | Wireshark NBAP Dissector access control | 264 | Not defined | Official fix | CVE-2013-5718 |