Denial of Service Vulnerability in Wireshark RELOAD Dissector
CVE-2013-2486

Currently unrated

Key Information:

Vendor

Opensuse
Status
Opensuse
Debian Linux
Vendor
CVE Published:
7 March 2013

What is CVE-2013-2486?

The RELOAD dissector in Wireshark versions prior to 1.8.6 is vulnerable due to the dissect_diagnosticrequest function utilizing an incorrect integer data type. This flaw allows remote attackers to craft packets with specially designed integer values, potentially causing the application to enter an infinite loop and leading to a denial of service. Users of affected Wireshark versions are encouraged to update to the latest version to mitigate this vulnerability.

References

http://lists.opensuse.org/opensuse-updates/2013-03/msg000...
vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/53425
third-party-advisoryx_refsource_SECUNIA
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8364
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.