CVE-2013-4927
wireshark: Integer signedness error in the Bluetooth SDP dissector (wnpa-sec-2013-45)
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Integer signedness error in the get_type_length function in epan/dissectors/packet-btsdp.c in the Bluetooth SDP dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet.
Error de entero sin signo en la función get_type_length en epan/dissectors/packet-btsdp.c del disector Bluetooth SDP de Wireshark 1.8.x anterior a 1.8.9 y 1.10.x anterior 1.10.1, permite a atacantes remotos provocar una denegación de servicio (bucle y consumo de CPU) a través de un paquete manipulado.
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2013-07-26 CVE Reserved
- 2013-07-29 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-189: Numeric Errors
CAPEC
References (16)
URL | Tag | Source |
---|---|---|
http://secunia.com/advisories/54296 | Third Party Advisory | |
http://secunia.com/advisories/54371 | Third Party Advisory | |
http://secunia.com/advisories/54425 | Third Party Advisory | |
http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html | X_refsource_confirm | |
http://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html | X_refsource_confirm | |
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8831 | X_refsource_confirm | |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17636 | Signature |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.0 Search vendor "Wireshark" for product "Wireshark" and version "1.8.0" | - |
Affected
| ||||||
Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.1 Search vendor "Wireshark" for product "Wireshark" and version "1.8.1" | - |
Affected
| ||||||
Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.2 Search vendor "Wireshark" for product "Wireshark" and version "1.8.2" | - |
Affected
| ||||||
Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.3 Search vendor "Wireshark" for product "Wireshark" and version "1.8.3" | - |
Affected
| ||||||
Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.4 Search vendor "Wireshark" for product "Wireshark" and version "1.8.4" | - |
Affected
| ||||||
Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.5 Search vendor "Wireshark" for product "Wireshark" and version "1.8.5" | - |
Affected
| ||||||
Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.6 Search vendor "Wireshark" for product "Wireshark" and version "1.8.6" | - |
Affected
| ||||||
Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.7 Search vendor "Wireshark" for product "Wireshark" and version "1.8.7" | - |
Affected
| ||||||
Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.8 Search vendor "Wireshark" for product "Wireshark" and version "1.8.8" | - |
Affected
| ||||||
Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.10.0 Search vendor "Wireshark" for product "Wireshark" and version "1.10.0" | - |
Affected
|