Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-4935
HistoryJul 30, 2013 - 12:56 a.m.

CVE-2013-4935

2013-07-3000:56:16
CWE-189
[email protected]
web.nvd.nist.gov
41
wireshark
asn.1
per
dissector
denial of service
cve-2013-4935
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.003

Percentile

71.5%

JSON

The dissect_per_length_determinant function in epan/dissectors/packet-per.c in the ASN.1 PER dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not initialize a length field in certain abnormal situations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Affected configurations

NVD
Node
wiresharkwiresharkMatch1.8.0
OR
wiresharkwiresharkMatch1.8.1
OR
wiresharkwiresharkMatch1.8.2
OR
wiresharkwiresharkMatch1.8.3
OR
wiresharkwiresharkMatch1.8.4
OR
wiresharkwiresharkMatch1.8.5
OR
wiresharkwiresharkMatch1.8.6
OR
wiresharkwiresharkMatch1.8.7
OR
wiresharkwiresharkMatch1.8.8
Node
wiresharkwiresharkMatch1.10.0
VendorProductVersionCPE
wiresharkwireshark1.8.7cpe:/a:wireshark:wireshark:1.8.7:::
wiresharkwireshark1.8.5cpe:/a:wireshark:wireshark:1.8.5:::
wiresharkwireshark1.8.3cpe:/a:wireshark:wireshark:1.8.3:::
wiresharkwireshark1.8.1cpe:/a:wireshark:wireshark:1.8.1:::
wiresharkwireshark1.8.4cpe:/a:wireshark:wireshark:1.8.4:::
wiresharkwireshark1.8.2cpe:/a:wireshark:wireshark:1.8.2:::
wiresharkwireshark1.8.6cpe:/a:wireshark:wireshark:1.8.6:::
wiresharkwireshark1.8.8cpe:/a:wireshark:wireshark:1.8.8:::
wiresharkwireshark1.8.0cpe:/a:wireshark:wireshark:1.8.0:::

References

Related

prion 1
cvelist 1
debiancve 1
ubuntucve 1
nvd 1
openvas 18
nessus 22
debian 1
osv 1
securityvulns 2
mageia 1
veracode 27
centos 2
oraclelinux 2
redhat 2
f5 2
amazon 1
fedora 3
gentoo 1
prion
prion
Design/Logic Flaw
2013-07-30 00:56:00
cvelist
cvelist
CVE-2013-4935
2013-07-29 19:00:00
debiancve
debiancve
CVE-2013-4935
2013-07-30 00:56:16
ubuntucve
ubuntucve
CVE-2013-4935
2013-07-30 00:00:00
nvd
nvd
CVE-2013-4935
2013-07-30 00:56:16
openvas
openvas
Debian Security Advisory DSA 2734-1 (wireshark - several vulnerabilities)
2013-08-05 00:00:00
Debian: Security Advisory (DSA-2734-1)
2013-08-04 00:00:00
Mageia: Security Advisory (MGASA-2013-0236)
2022-01-28 00:00:00
nessus
nessus
Debian DSA-2734-1 : wireshark - several vulnerabilities
2013-08-07 00:00:00
SuSE 11.2 / 11.3 Security Update : wireshark (SAT Patch Numbers 8318 / 8319)
2013-09-14 00:00:00
Mandriva Linux Security Advisory : wireshark (MDVSA-2013:204)
2013-07-31 00:00:00
debian
debian
[SECURITY] [DSA 2734-1] wireshark security update
2013-08-05 16:37:08
osv
osv
wireshark - several
2013-08-05 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2734-1] wireshark security update
2013-08-12 00:00:00
Wireshark multiple security vulnerabilities
2013-08-12 00:00:00
mageia
mageia
Updated wireshark package fixes security vulnerabilities
2013-07-29 18:00:22
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:02:02
Denial Of Service (DoS)
2019-05-02 05:02:01
Denial Of Service (DoS)
2019-05-02 05:02:01
centos
centos
wireshark security update
2014-03-31 17:51:37
wireshark security update
2013-11-26 13:33:12
oraclelinux
oraclelinux
wireshark security update
2014-03-31 00:00:00
wireshark security, bug fix, and enhancement update
2013-11-25 00:00:00
redhat
redhat
(RHSA-2014:0341) Moderate: wireshark security update
2014-03-31 00:00:00
(RHSA-2013:1569) Moderate: wireshark security, bug fix, and enhancement update
2013-11-21 00:00:00
f5
f5
SOL15868 - Multiple Wireshark vulnerabilities
2014-11-27 00:00:00
K15868 : Multiple Wireshark vulnerabilities
2015-04-29 00:00:00
amazon
amazon
Medium: wireshark
2013-12-02 20:29:00
fedora
fedora
[SECURITY] Fedora 18 Update: wireshark-1.10.2-4.fc18
2013-12-19 07:14:40
[SECURITY] Fedora 20 Update: wireshark-1.10.2-7.fc20
2013-10-03 01:07:39
[SECURITY] Fedora 19 Update: wireshark-1.10.2-6.fc19
2013-09-28 00:16:37
gentoo
gentoo
Wireshark: Multiple vulnerabilities
2013-08-28 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.003

Percentile

71.5%

JSON
Related for CVE-2013-4935
prion1cvelist1debiancve1ubuntucve1nvd1openvas18nessus22debian1osv1securityvulns2mageia1veracode27centos2oraclelinux2redhat2f52amazon1fedora3gentoo1