CVE-2013-1574: Input Validation
The dissectbthcieiraddata function in epan/dissectors/packet-bthcicmd.c in the Bluetooth HCI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1574?
CVE-2013-1574 has a moderate severity level due to its potential to cause denial of service through an infinite loop.
How do I fix CVE-2013-1574?
To fix CVE-2013-1574, you should upgrade Wireshark to version 1.6.13 or 1.8.5 or later.
Which versions of Wireshark are affected by CVE-2013-1574?
Wireshark versions 1.6.0 through 1.6.12 and 1.8.0 through 1.8.4 are affected by CVE-2013-1574.
What kind of attack is possible with CVE-2013-1574?
CVE-2013-1574 allows remote attackers to exploit the vulnerability to cause a denial of service.
Is CVE-2013-1574 a reliable indication of vulnerability in Wireshark?
Yes, CVE-2013-1574 is a recognized vulnerability that indicates a potential risk in specific versions of Wireshark.