The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Information
Published : 2013-06-09 14:55
Updated : 2017-09-18 18:36
NVD link : CVE-2013-4083
Mitre link : CVE-2013-4083
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
wireshark
- wireshark