CVE-2013-3561

Published: May 25, 2013Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector.

Affected (11)

Products: Debian: Debian Linux · Opensuse: Opensuse · Wireshark: Wireshark

1 product

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Opensuse Opensuse	Version 11.4
Opensuse Opensuse	Version 12.2
Opensuse Opensuse	Version 12.3

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.8.0
Wireshark Wireshark	Version 1.8.1
Wireshark Wireshark	Version 1.8.2
Wireshark Wireshark	Version 1.8.3
Wireshark Wireshark	Version 1.8.4
Wireshark Wireshark	Version 1.8.5
Wireshark Wireshark	Version 1.8.6

Related CWEs

References (40)

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-etch.c?r1=48919&r2=48918&pathrev=48919

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mysql.c?r1=48894&r2=48893&pathrev=48894

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-websocket.c?r1=48336&r2=48335&pathrev=48336

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc?view=revision&revision=48336

Source: cve@mitre.org

Patch

http://anonsvn.wireshark.org/viewvc?view=revision&revision=48894

Source: cve@mitre.org

Patch

http://anonsvn.wireshark.org/viewvc?view=revision&revision=48919

Source: cve@mitre.org

Patch

http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html

Source: cve@mitre.org

http://secunia.com/advisories/53425

Source: cve@mitre.org

http://secunia.com/advisories/54425

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: cve@mitre.org

http://www.wireshark.org/security/wnpa-sec-2013-29.html

Source: cve@mitre.org

Vendor Advisory

http://www.wireshark.org/security/wnpa-sec-2013-30.html

Source: cve@mitre.org

Vendor Advisory

http://www.wireshark.org/security/wnpa-sec-2013-31.html

Source: cve@mitre.org

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8448

Source: cve@mitre.org

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8458

Source: cve@mitre.org

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8464

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16755

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-etch.c?r1=48919&r2=48918&pathrev=48919

Source: af854a3a-2127-422b-91ae-364da2661108

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mysql.c?r1=48894&r2=48893&pathrev=48894

Source: af854a3a-2127-422b-91ae-364da2661108

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-websocket.c?r1=48336&r2=48335&pathrev=48336

Source: af854a3a-2127-422b-91ae-364da2661108

http://anonsvn.wireshark.org/viewvc?view=revision&revision=48336

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://anonsvn.wireshark.org/viewvc?view=revision&revision=48894

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://anonsvn.wireshark.org/viewvc?view=revision&revision=48919

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/53425

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/54425

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2013-29.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.wireshark.org/security/wnpa-sec-2013-30.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.wireshark.org/security/wnpa-sec-2013-31.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8448

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8458

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8464

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16755

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.