CVE-2013-4927: High severity wireshark vulnerability
Integer signedness error in the gettypelength function in epan/dissectors/packet-btsdp.c in the Bluetooth SDP dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4927?
CVE-2013-4927 is classified as a denial of service vulnerability that can cause loops and excessive CPU consumption.
How do I fix CVE-2013-4927?
To mitigate CVE-2013-4927, you should upgrade to Wireshark version 1.8.9 or later or 1.10.1 or later.
Which versions of Wireshark are affected by CVE-2013-4927?
CVE-2013-4927 affects Wireshark versions 1.8.0 through 1.8.8 and 1.10.0.
What type of attack does CVE-2013-4927 enable?
CVE-2013-4927 enables remote attackers to cause a denial of service by sending crafted Bluetooth SDP packets.
What is the impact of CVE-2013-4927 on Wireshark users?
The impact of CVE-2013-4927 on Wireshark users includes unresponsive application behavior and increased CPU load.