CVE-2013-2488
Publication date 7 March 2013
Last updated 24 July 2024
Ubuntu priority
The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service (application crash) via a large offset value that triggers write access to an invalid memory location.
Status
Package | Ubuntu Release | Status |
---|---|---|
wireshark | ||
16.04 LTS xenial |
Not affected
|
|
14.04 LTS trusty |
Not affected
|
|
References
Other references
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8380
- http://www.wireshark.org/security/wnpa-sec-2013-22.html
- http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html
- http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=48011
- https://www.cve.org/CVERecord?id=CVE-2013-2488