CVE-2013-3559

Published: May 25, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer dereference, and application crash) via a malformed packet.

Affected (11)

Products: Debian: Debian Linux · Opensuse: Opensuse · Wireshark: Wireshark

1 product

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Opensuse Opensuse	Version 11.4
Opensuse Opensuse	Version 12.2
Opensuse Opensuse	Version 12.3

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.8.0
Wireshark Wireshark	Version 1.8.1
Wireshark Wireshark	Version 1.8.2
Wireshark Wireshark	Version 1.8.3
Wireshark Wireshark	Version 1.8.4
Wireshark Wireshark	Version 1.8.5
Wireshark Wireshark	Version 1.8.6

Related CWEs

References (32)

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=48644&r2=48643&pathrev=48644

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc?view=revision&revision=48644

Source: cve@mitre.org

Patch

http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2014-0341.html

Source: cve@mitre.org

http://secunia.com/advisories/53425

Source: cve@mitre.org

http://secunia.com/advisories/54425

Source: cve@mitre.org

http://www.debian.org/security/2013/dsa-2700

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: cve@mitre.org

http://www.wireshark.org/security/wnpa-sec-2013-27.html

Source: cve@mitre.org

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8231

Source: cve@mitre.org

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8540

Source: cve@mitre.org

Exploit

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8541

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16228

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=48644&r2=48643&pathrev=48644

Source: af854a3a-2127-422b-91ae-364da2661108

http://anonsvn.wireshark.org/viewvc?view=revision&revision=48644

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0341.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/53425

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/54425

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2013/dsa-2700

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2013-27.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8231

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8540

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8541

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16228

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.