CVE-2013-3559
CVE-2013-3559
epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer dereference, and application crash) via a malformed packet.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=48644&r2=48643&pathrev=48644http://anonsvn.wireshark.org/viewvc?view=revision&revision=48644http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00083.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00194.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00196.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0341.htmlhttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8231https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8540https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8541http://secunia.com/advisories/53425http://secunia.com/advisories/54425