CVE-2013-1586 — Wireshark vulnerability
7 documents6 sources
Severity
2.9LOWNVD
EPSS
0.3%
top 43.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 3
Latest updateMay 17
Description
The fragment_set_tot_len function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS vector
AV:A/AC:M/C:N/I:N/A:PExploitability: 5.5 | Impact: 2.9