CVE-2013-2486 in Wireshark

摘要 (英语)

The dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet.

Be aware that VulDB is the high quality source for vulnerability data.

预定

2013-03-06

披露

2013-03-07

状态

已确认

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
8821	Wireshark PPP CCP Dissector packet-reload.c 拒绝服务	189	概念验证	官方修复	CVE-2013-2486
8820	Wireshark ASN.1 BER Dissector packet-reload.c 拒绝服务	189	概念验证	官方修复	CVE-2013-2486
8819	Wireshark GTPv2 Dissector packet-reload.c 拒绝服务	189	概念验证	官方修复	CVE-2013-2486
8818	Wireshark MPEG DSM-CC Dissector packet-reload.c 拒绝服务	189	概念验证	官方修复	CVE-2013-2486
8817	Wireshark ETCH Dissector packet-etch.c 拒绝服务	189	概念验证	官方修复	CVE-2013-2486
8816	Wireshark MySQL Dissector packet-mysql.c 拒绝服务	189	概念验证	官方修复	CVE-2013-2486
8815	Wireshark DCP ETSI Dissector 拒绝服务	189	概念验证	官方修复	CVE-2013-2486
7930	Wireshark RELOAD Dissector 拒绝服务	189	概念验证	官方修复	CVE-2013-2486

来源

• MITRE
• NVD
• CVE Details