CVE-2013-4075

Published: Jun 9, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

epan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8 does not properly initialize memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Affected (12)

Products: Wireshark: Wireshark · Debian: Debian Linux · Opensuse: Opensuse

1 product

1 product

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.8.0
Wireshark Wireshark	Version 1.8.1
Wireshark Wireshark	Version 1.8.2
Wireshark Wireshark	Version 1.8.3
Wireshark Wireshark	Version 1.8.4
Wireshark Wireshark	Version 1.8.5
Wireshark Wireshark	Version 1.8.6
Wireshark Wireshark	Version 1.8.7

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Opensuse Opensuse	Version 11.4
Opensuse Opensuse	Version 12.2
Opensuse Opensuse	Version 12.3

Related CWEs

References (28)

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gmr1_bcch.c?r1=44674&r2=44673&pathrev=44674

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc?view=revision&revision=44674

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2017-0631.html

Source: cve@mitre.org

http://secunia.com/advisories/53762

Source: cve@mitre.org

http://secunia.com/advisories/54425

Source: cve@mitre.org

http://www.debian.org/security/2013/dsa-2709

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: cve@mitre.org

http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html

Source: cve@mitre.org

Vendor Advisory

http://www.wireshark.org/security/wnpa-sec-2013-33.html

Source: cve@mitre.org

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7664

Source: cve@mitre.org

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8726

Source: cve@mitre.org

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16859

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gmr1_bcch.c?r1=44674&r2=44673&pathrev=44674

Source: af854a3a-2127-422b-91ae-364da2661108

http://anonsvn.wireshark.org/viewvc?view=revision&revision=44674

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2017-0631.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/53762

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/54425

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2013/dsa-2709

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.wireshark.org/security/wnpa-sec-2013-33.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7664

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8726

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16859

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.