Denial of Service Vulnerability in Wireshark by The Wireshark Development Team
CVE-2013-2487

Currently unrated

Key Information:

Vendor

Opensuse
Status
Opensuse
Debian Linux
Vendor
CVE Published:
7 March 2013

What is CVE-2013-2487?

A vulnerability exists in the REsource LOcation And Discovery (RELOAD) dissector of Wireshark that incorrectly utilizes integer data types. This flaw permits remote attackers to create specially crafted packets, which can trigger an infinite loop in the affected application. The compromised functions include dissect_icecandidates, dissect_kinddata, dissect_nodeid_list, among others, leading to a denial of service condition, effectively rendering Wireshark unresponsive.

References

http://lists.opensuse.org/opensuse-updates/2013-03/msg000...
vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/53425
third-party-advisoryx_refsource_SECUNIA
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8364
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.