CVE-2013-2486 in Wireshark

Zusammenfassung (Englisch)

The dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet.

Reservieren

06.03.2013

Veröffentlichung

07.03.2013

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
8821	Wireshark PPP CCP Dissector packet-reload.c Denial of Service	189	Proof-of-Concept	Offizieller Fix	CVE-2013-2486
8820	Wireshark ASN.1 BER Dissector packet-reload.c Denial of Service	189	Proof-of-Concept	Offizieller Fix	CVE-2013-2486
8819	Wireshark GTPv2 Dissector packet-reload.c Denial of Service	189	Proof-of-Concept	Offizieller Fix	CVE-2013-2486
8818	Wireshark MPEG DSM-CC Dissector packet-reload.c Denial of Service	189	Proof-of-Concept	Offizieller Fix	CVE-2013-2486
8817	Wireshark ETCH Dissector packet-etch.c Denial of Service	189	Proof-of-Concept	Offizieller Fix	CVE-2013-2486
8816	Wireshark MySQL Dissector packet-mysql.c Denial of Service	189	Proof-of-Concept	Offizieller Fix	CVE-2013-2486
8815	Wireshark DCP ETSI Dissector Denial of Service	189	Proof-of-Concept	Offizieller Fix	CVE-2013-2486
7930	Wireshark RELOAD Dissector Denial of Service	189	Proof-of-Concept	Offizieller Fix	CVE-2013-2486