CVE-2013-5718: Medium severity wireshark vulnerability
The dissectnbapTdCHID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dchid value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5718?
CVE-2013-5718 has a high severity due to its ability to trigger application crashes, leading to denial of service.
How do I fix CVE-2013-5718?
To fix CVE-2013-5718, upgrade Wireshark to version 1.8.10 or 1.10.2 or later.
Which versions of Wireshark are affected by CVE-2013-5718?
CVE-2013-5718 affects Wireshark versions 1.8.0 through 1.8.9 and versions 1.10.0 through 1.10.1.
What types of exploitation are possible with CVE-2013-5718?
Exploitation of CVE-2013-5718 could allow remote attackers to send crafted packets that crash the Wireshark application.
Is there a workaround for CVE-2013-5718?
There are no specific workarounds for CVE-2013-5718; the best approach is to update the software to mitigate the risk.