p PatchFirst

CVE-2013-2488

CVE-2013-2488

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service (application crash) via a large offset value that triggers write access to an invalid memory location.

EPSS 2.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • wireshark Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.8.2-5

    Update to 1.8.2-5

  • wireshark Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.8.2-5

    Update to 1.8.2-5

  • wireshark Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.8.2-5

    Update to 1.8.2-5

Original sources

Check your server →