Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-4929

Опубликовано: 30 июл. 2013
Источник: nvd
CVSS2: 7.8
EPSS Низкий

Описание

The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not terminate packet-data processing after finding zero remaining bytes, which allows remote attackers to cause a denial of service (loop) via a crafted packet.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.3:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.4:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.5:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.6:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.7:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.8:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:wireshark:wireshark:1.10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 82%
0.01779
Низкий

7.8 High

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu
больше 12 лет назад

The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not terminate packet-data processing after finding zero remaining bytes, which allows remote attackers to cause a denial of service (loop) via a crafted packet.

redhat
больше 12 лет назад

The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not terminate packet-data processing after finding zero remaining bytes, which allows remote attackers to cause a denial of service (loop) via a crafted packet.

debian
больше 12 лет назад

The parseFields function in epan/dissectors/packet-dis-pdus.c in the D ...

github
больше 3 лет назад

The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not terminate packet-data processing after finding zero remaining bytes, which allows remote attackers to cause a denial of service (loop) via a crafted packet.

suse-cvrf
около 11 лет назад

Security update for wireshark

EPSS

Процентиль: 82%
0.01779
Низкий

7.8 High

CVSS2

Дефекты

CWE-189