CVE-2013-7113: Input Validation
Published Dec 19, 2013
·Updated
epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Affected Software
4 affected components
Wireshark Wireshark=1.10.0
Wireshark Wireshark=1.10.1
Wireshark Wireshark=1.10.2
Wireshark Wireshark=1.10.3
Remediation
Patch Available
Event History
Dec 19, 2013
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-7113?
The severity of CVE-2013-7113 is considered to be moderate as it can lead to a denial of service by crashing the application.
2
How do I fix CVE-2013-7113?
To fix CVE-2013-7113, upgrade Wireshark to version 1.10.4 or later.
3
What software versions are affected by CVE-2013-7113?
CVE-2013-7113 affects Wireshark versions 1.10.0 to 1.10.3.
4
What type of attack does CVE-2013-7113 facilitate?
CVE-2013-7113 facilitates denial of service attacks through crafted packets.
5
Is CVE-2013-7113 a local or remote vulnerability?
CVE-2013-7113 is a remote vulnerability that can be exploited by attackers sending crafted packets.