QwikSec

Security Database

CVE

CWE

Training

CVE-2013-2488

Published: Mar 7, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service (application crash) via a large offset value that triggers write access to an invalid memory location.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.wireshark.org/security/wnpa-sec-2013-22.html

x_refsource_CONFIRM

http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html

x_refsource_CONFIRM

openSUSE-SU-2013:0494

vendor-advisory

x_refsource_SUSE

http://anonsvn.wireshark.org/viewvc?view=revision&revision=48011

x_refsource_CONFIRM

oval:org.mitre.oval:def:16672

vdb-entry

signature

x_refsource_OVAL

third-party-advisory

x_refsource_SECUNIA

http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html

x_refsource_CONFIRM

openSUSE-SU-2013:0506

vendor-advisory

x_refsource_SUSE

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8380

x_refsource_CONFIRM

vendor-advisory

x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.