CVE

Id
63503  
CVE No.
CVE-2013-3556  
Status
Candidate  
Description
The fragment_add_seq_common function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference during a comparison, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.  
Phase
Assigned (20130520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
629806 63503 CVE-2013-3556 CONFIRM:http://anonsvn.wireshark.org/viewvc/trunk/epan/reassemble.c?r1=48943&r2=48942&pathrev=48943  View
629807 63503 CVE-2013-3556 CONFIRM:http://anonsvn.wireshark.org/viewvc?view=revision&revision=48943  View
629808 63503 CVE-2013-3556 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2013-25.html  View
629809 63503 CVE-2013-3556 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8599  View
629810 63503 CVE-2013-3556 CONFIRM:https://www.wireshark.org/docs/relnotes/wireshark-1.6.15.html  View
629811 63503 CVE-2013-3556 GENTOO:GLSA-201308-05  View
629812 63503 CVE-2013-3556 URL:http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml  View
629813 63503 CVE-2013-3556 SUSE:openSUSE-SU-2013:1084  View
629814 63503 CVE-2013-3556 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html  View
629815 63503 CVE-2013-3556 SUSE:openSUSE-SU-2013:1086  View
629816 63503 CVE-2013-3556 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html  View
629817 63503 CVE-2013-3556 SUSE:openSUSE-SU-2013:0911  View
629818 63503 CVE-2013-3556 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html  View
629819 63503 CVE-2013-3556 SUSE:openSUSE-SU-2013:0947  View
629820 63503 CVE-2013-3556 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html  View
629821 63503 CVE-2013-3556 SECUNIA:53425  View
629822 63503 CVE-2013-3556 URL:http://secunia.com/advisories/53425  View
629823 63503 CVE-2013-3556 SECUNIA:54425  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21255 JVNDB-2013-002830 Wireshark における整数オーバーフローの脆弱性 Wireshark には、Websocket 解析機能のクラッシュ、MySQL 解析機能における無限ループ、および ETCH 解析機能における大きなループ (a large loop) に関する処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2013-3561 63503 7.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002830.html  View