CVE-2008-4683: Medium severity wireshark vulnerability
The dissectbtacl function in packet-bthciacl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a packet with an invalid length, related to an erroneous tvbmemcpy call.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4683?
CVE-2008-4683 has been classified as a high severity vulnerability due to its potential to cause denial of service.
What does CVE-2008-4683 affect?
CVE-2008-4683 affects multiple versions of Wireshark, specifically between versions 0.99.2 and 1.0.3.
How do I fix CVE-2008-4683?
To fix CVE-2008-4683, you should upgrade to a version of Wireshark that is not affected, such as version 1.0.4 or later.
What type of attack does CVE-2008-4683 enable?
CVE-2008-4683 allows remote attackers to execute a denial of service attack, potentially crashing the application.
How does CVE-2008-4683 cause denial of service?
CVE-2008-4683 causes denial of service due to an error in the dissect_btacl function when handling packets with an invalid length.