CVE-2013-4930: Input Validation
The dissectdvbcitpduhdr function in epan/dissectors/packet-dvbci.c in the DVB-CI dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not validate a certain length value before decrementing it, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4930?
CVE-2013-4930 is classified as a denial of service vulnerability due to assertion failures in Wireshark.
How do I fix CVE-2013-4930?
To fix CVE-2013-4930, upgrade to Wireshark version 1.8.9 or later for the 1.8.x series, or version 1.10.1 or later for the 1.10.x series.
Which versions of Wireshark are affected by CVE-2013-4930?
CVE-2013-4930 affects Wireshark versions 1.8.0 to 1.8.8 and 1.10.0.
What kind of attack can be executed using CVE-2013-4930?
An attacker can exploit CVE-2013-4930 to cause a denial of service through assertion failures.
Is CVE-2013-4930 a remote vulnerability?
Yes, CVE-2013-4930 can be exploited by remote attackers.