CVE-2013-4082
Published Jun 9, 2013
Last updated 6 years ago
Overview
- Description
- The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not validate the relationship between a record length and a trailer length, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted packet.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-119
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "606DF728-1DA6-4989-B40A-44471CC677DB"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F824AE6B-B087-4C69-8F73-7B146920FC3C"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6702EAA1-7FBD-4755-B7C2-C2B3A1AFF142"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.8.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF6D1967-500E-4E96-A6D2-CE17EA839572"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8400AD4-ECE9-4810-B559-D4EB03AECC50"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "424B66E9-56F8-4D87-94C6-80F5EA0BD1B2"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.8.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6BD261DB-1794-473F-BAD9-E5B7771288BD"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.8.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1007895-7CC2-4C2D-BACB-BAE6DECDB840"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA"
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE554781-1EB9-446E-911F-6C11970C47F4"
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D806A17E-B8F9-466D-807D-3F1E77603DC8"
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFBF430B-0832-44B0-AA0E-BA9E467F7668"
}
],
"operator": "OR"
}
]
}
]