CVE-2013-2486: Medium severity Debian Debian Linux vulnerability

Published Mar 7, 2013

Updated

The dissectdiagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet.

Affected Software

11 affected components

Debian Debian Linux=7.0

openSUSE openSUSE=11.4

openSUSE openSUSE=12.1

openSUSE openSUSE=12.2

openSUSE openSUSE=12.3

Wireshark Wireshark=1.8.0

Wireshark Wireshark=1.8.1

Wireshark Wireshark=1.8.2

Wireshark Wireshark=1.8.3

Wireshark Wireshark=1.8.4

Wireshark Wireshark=1.8.5

Event History

Mar 7, 2013

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-2486?

CVE-2013-2486 has a severity rating that allows attackers to cause a denial of service via an infinite loop.

How do I fix CVE-2013-2486?

To fix CVE-2013-2486, you should upgrade Wireshark to version 1.8.6 or later.

Which versions of Wireshark are affected by CVE-2013-2486?

Wireshark versions 1.8.0 through 1.8.5 are affected by CVE-2013-2486.

Can CVE-2013-2486 affect me if I use Debian or openSUSE?

Yes, CVE-2013-2486 can affect Debian 7.0 and various versions of openSUSE including 11.4 and 12.x.

Is CVE-2013-2486 a local or remote vulnerability?

CVE-2013-2486 is a remote vulnerability that allows attackers to exploit it over the network.