Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2013-1584

The dissect_version_5_and_6_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

Related bugs and status

CVE-2013-1584 (Candidate) is related to these bugs:

Bug #1401314: [Security] Multitude of Vulnerabilities against 1.6.7 in Precise

Summary				In	Importance	Status
	1401314	[Security] Multitude of Vulnerabilities against 1.6.7 in Precise		wireshark (Ubuntu)	High	In Progress

See the

CVE page on Mitre.org for more details.

References

CONFIRM: http://www.wireshark.o...
CONFIRM: https://bugs.wireshark...
SUSE: openSUSE-SU-2013:0276
SUSE: openSUSE-SU-2013:0285
CONFIRM: http://anonsvn.wiresha...
CONFIRM: http://anonsvn.wiresha...
OVAL: oval:org.mitre.oval:de...