CVE

Id
66285  
CVE No.
CVE-2013-6338  
Status
Candidate  
Description
The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.  
Phase
Assigned (20131031)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
644256 66285 CVE-2013-6338 CONFIRM:http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sip.c?r1=52354&r2=52353&pathrev=52354  View
644257 66285 CVE-2013-6338 CONFIRM:http://anonsvn.wireshark.org/viewvc?view=revision&revision=52354  View
644258 66285 CVE-2013-6338 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2013-63.html  View
644259 66285 CVE-2013-6338 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9228  View
644260 66285 CVE-2013-6338 DEBIAN:DSA-2792  View
644261 66285 CVE-2013-6338 URL:http://www.debian.org/security/2013/dsa-2792  View
644262 66285 CVE-2013-6338 REDHAT:RHSA-2014:0342  View
644263 66285 CVE-2013-6338 URL:http://rhn.redhat.com/errata/RHSA-2014-0342.html  View
644264 66285 CVE-2013-6338 SUSE:openSUSE-SU-2013:1671  View
644265 66285 CVE-2013-6338 URL:http://lists.opensuse.org/opensuse-updates/2013-11/msg00026.html  View
644266 66285 CVE-2013-6338 SUSE:openSUSE-SU-2013:1675  View
644267 66285 CVE-2013-6338 URL:http://lists.opensuse.org/opensuse-updates/2013-11/msg00027.html  View
644268 66285 CVE-2013-6338 OVAL:oval:org.mitre.oval:def:19145  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24315 JVNDB-2013-005890 ASUS RT-N56U および RT-AC66U ルータのファームウェアにおけるバッファオーバーフローの脆弱性 ASUS RT-N56U および RT-AC66U ルータのファームウェアには、バッファオーバーフローの脆弱性が存在します。 CVE-2013-6343 66285 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005890.html  View