CVE-2013-4083

Published: Jun 9, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Affected (25)

Products: Wireshark: Wireshark

1 product

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.6.0
Wireshark Wireshark	Version 1.6.10
Wireshark Wireshark	Version 1.6.11
Wireshark Wireshark	Version 1.6.12
Wireshark Wireshark	Version 1.6.13
Wireshark Wireshark	Version 1.6.14
Wireshark Wireshark	Version 1.6.15
Wireshark Wireshark	Version 1.6.1
Wireshark Wireshark	Version 1.6.2
Wireshark Wireshark	Version 1.6.3
Wireshark Wireshark	Version 1.6.4
Wireshark Wireshark	Version 1.6.5
Wireshark Wireshark	Version 1.6.6
Wireshark Wireshark	Version 1.6.7
Wireshark Wireshark	Version 1.6.8
Wireshark Wireshark	Version 1.6.9

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.8.0
Wireshark Wireshark	Version 1.8.1
Wireshark Wireshark	Version 1.8.2
Wireshark Wireshark	Version 1.8.3
Wireshark Wireshark	Version 1.8.4
Wireshark Wireshark	Version 1.8.5
Wireshark Wireshark	Version 1.8.6
Wireshark Wireshark	Version 1.8.7

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.10.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (34)

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=49802&r2=49801&pathrev=49802

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc?view=revision&revision=49802

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2014-0341.html

Source: cve@mitre.org

http://secunia.com/advisories/53762

Source: cve@mitre.org

http://secunia.com/advisories/54296

Source: cve@mitre.org

http://secunia.com/advisories/54425

Source: cve@mitre.org

http://www.debian.org/security/2013/dsa-2709

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2013:172

Source: cve@mitre.org

http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html

Source: cve@mitre.org

http://www.wireshark.org/docs/relnotes/wireshark-1.6.16.html

Source: cve@mitre.org

http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html

Source: cve@mitre.org

http://www.wireshark.org/security/wnpa-sec-2013-41.html

Source: cve@mitre.org

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8717

Source: cve@mitre.org

Patch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16375

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=49802&r2=49801&pathrev=49802

Source: af854a3a-2127-422b-91ae-364da2661108

http://anonsvn.wireshark.org/viewvc?view=revision&revision=49802

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0341.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/53762

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/54296

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/54425

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2013/dsa-2709

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:172

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/docs/relnotes/wireshark-1.6.16.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2013-41.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8717

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16375

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.