CVE-2013-4074
NoneCVSS
—
EPSS
60.6%
Published
Jun 9, 2013
CISA due date
—
The record
The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | wireshark | 0 | 1.10.0-1 |
| Debian:12 | wireshark | 0 | 1.10.0-1 |
| Debian:13 | wireshark | 0 | 1.10.0-1 |
| Debian:7 | wireshark | 0 | 1.8.2-5wheezy4 |
| Mageia:2 | wireshark | 0 | 1.6.16-1.mga2 |
| Mageia:3 | wireshark | 0 | 1.8.8-1.mga3 |
| Ubuntu:14.04:LTS | wireshark | 0 | 1.10.6-1 |
Related vulnerabilities
- CVE-2024-11596 ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of… Also affects wireshark
- CVE-2024-9781 AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows… Also affects wireshark
- CVE-2024-9780 ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or… Also affects wireshark
- CVE-2024-8645 SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of… Also affects wireshark
- CVE-2024-8250 NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of… Also affects wireshark
- CVE-2024-4854 MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to… Also affects wireshark
- CVE-2024-2955 T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of… Also affects wireshark
- CVE-2023-6175 NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows… Also affects wireshark