NVD

Id
41918  
Name
CVE-2013-7112  
Description
The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-12-19  
Modified Date
2014-04-19  
Seq
2013-7112  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211631 41918 CVE-2013-7112 http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sip.c?r1=51738&r2=51737&pathrev=51738  View
211632 41918 CVE-2013-7112 http://anonsvn.wireshark.org/viewvc?view=revision&revision=51738  View
211633 41918 CVE-2013-7112 openSUSE-SU-2014:0013  View
211634 41918 CVE-2013-7112 openSUSE-SU-2014:0017  View
211635 41918 CVE-2013-7112 openSUSE-SU-2014:0020  View
211636 41918 CVE-2013-7112 RHSA-2014:0341  View
211637 41918 CVE-2013-7112 RHSA-2014:0342  View
211638 41918 CVE-2013-7112 MDVSA-2013:296  View
211639 41918 CVE-2013-7112 http://www.wireshark.org/security/wnpa-sec-2013-66.html  View
211640 41918 CVE-2013-7112 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9388  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24053 JVNDB-2013-005628 Wireshark の SIP 解析機能におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の SIP 解析機能の epan/dissectors/packet-sip.c 内の dissect_sip_common 関数は、空行をチェックしないため、サービス運用妨害 (無限ループ) 状態にされる脆弱性が存在します。 CVE-2013-7112 67054 CVE-2013-7112 41918 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005628.html 2013-12-17 2015-08-06 View