CVE

Id
63509  
CVE No.
CVE-2013-3562  
Status
Candidate  
Description
Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (application crash) via a malformed packet.  
Phase
Assigned (20130520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
629944 63509 CVE-2013-3562 CONFIRM:http://anonsvn.wireshark.org/viewvc/trunk-1.8/epan/dissectors/packet-websocket.c?r1=48419&r2=48418&pathrev=48419  View
629945 63509 CVE-2013-3562 CONFIRM:http://anonsvn.wireshark.org/viewvc?view=revision&revision=48419  View
629946 63509 CVE-2013-3562 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2013-29.html  View
629947 63509 CVE-2013-3562 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8499  View
629948 63509 CVE-2013-3562 DEBIAN:DSA-2700  View
629949 63509 CVE-2013-3562 URL:http://www.debian.org/security/2013/dsa-2700  View
629950 63509 CVE-2013-3562 GENTOO:GLSA-201308-05  View
629951 63509 CVE-2013-3562 URL:http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml  View
629952 63509 CVE-2013-3562 SUSE:openSUSE-SU-2013:1084  View
629953 63509 CVE-2013-3562 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html  View
629954 63509 CVE-2013-3562 SUSE:openSUSE-SU-2013:1086  View
629955 63509 CVE-2013-3562 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html  View
629956 63509 CVE-2013-3562 OVAL:oval:org.mitre.oval:def:16696  View
629957 63509 CVE-2013-3562 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16696  View
629958 63509 CVE-2013-3562 SECUNIA:53425  View
629959 63509 CVE-2013-3562 URL:http://secunia.com/advisories/53425  View
629960 63509 CVE-2013-3562 SECUNIA:54425  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22212 JVNDB-2013-003787 Puppet および Puppet Enterprise における任意の Ruby クラスをインスタンス化される脆弱性 Puppet および Puppet Enterprise は、信頼性のない YAML をデシリアライズするため、任意の Ruby オブジェクトをインスタンス化される、および任意のコードを実行される脆弱性が存在します。 CVE-2013-3567 63509 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003787.html  View