CVE-2013-5721: Input Validation
The dissectmqrr function in epan/dissectors/packet-mq.c in the MQ dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not properly determine when to enter a certain loop, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5721?
The severity of CVE-2013-5721 is classified as a denial-of-service vulnerability that can result in application crashes.
How do I fix CVE-2013-5721?
To fix CVE-2013-5721, update Wireshark to version 1.8.10 or later for the 1.8.x branch, and to version 1.10.2 or later for the 1.10.x branch.
Which versions of Wireshark are affected by CVE-2013-5721?
CVE-2013-5721 affects Wireshark versions 1.8.0 to 1.8.9 and 1.10.0 to 1.10.1.
What causes the denial of service in CVE-2013-5721?
The denial of service in CVE-2013-5721 is caused by improper handling of certain packets in the dissect_mq_rr function.
Is CVE-2013-5721 a remote vulnerability?
Yes, CVE-2013-5721 is a remote vulnerability that allows attackers to cause a denial of service via crafted packets.