CVE-2013-4078

Published: Jun 9, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Affected (12)

Products: Wireshark: Wireshark · Debian: Debian Linux · Opensuse: Opensuse

1 product

1 product

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.8.0
Wireshark Wireshark	Version 1.8.1
Wireshark Wireshark	Version 1.8.2
Wireshark Wireshark	Version 1.8.3
Wireshark Wireshark	Version 1.8.4
Wireshark Wireshark	Version 1.8.5
Wireshark Wireshark	Version 1.8.6
Wireshark Wireshark	Version 1.8.7

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Opensuse Opensuse	Version 11.4
Opensuse Opensuse	Version 12.2
Opensuse Opensuse	Version 12.3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (26)

http://anonsvn.wireshark.org/viewvc?view=revision&revision=45566

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc?view=revision&revision=46158

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html

Source: cve@mitre.org

http://secunia.com/advisories/53762

Source: cve@mitre.org

http://secunia.com/advisories/54425

Source: cve@mitre.org

http://www.debian.org/security/2013/dsa-2709

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: cve@mitre.org

http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html

Source: cve@mitre.org

http://www.wireshark.org/security/wnpa-sec-2013-36.html

Source: cve@mitre.org

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7862

Source: cve@mitre.org

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8729

Source: cve@mitre.org

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16936

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc?view=revision&revision=45566

Source: af854a3a-2127-422b-91ae-364da2661108

http://anonsvn.wireshark.org/viewvc?view=revision&revision=46158

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/53762

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/54425

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2013/dsa-2709

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2013-36.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7862

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8729

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16936

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.