CVE-2013-4077 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Wireshark

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents6 sources

Severity

5.0MEDIUMNVD

EPSS

1.5%

top 18.60%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Wireshark Debian Wireshark Debian Linux +1 more

Timeline

PublishedJun 9

Latest updateMay 14

Description

Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages4 packages

▶debiandebian/wireshark< wireshark 1.10.0-1 (bookworm)

▶Debianwireshark/wireshark< 1.10.0-1+3

▶NVDwireshark/wireshark8 versions+7

▶NVDopensuse/opensuse11.4, 12.2, 12.3+2

Also affects: Debian Linux 7.0

🔴Vulnerability Details

GHSA

GHSA-9f36-vv9p-qwvm: Array index error in the NBAP dissector in Wireshark 1↗2022-05-14

▶

OSV

CVE-2013-4077: Array index error in the NBAP dissector in Wireshark 1↗2013-06-09

▶

📋Vendor Advisories

Red Hat

wireshark: Array index error in the NBAP dissector (wnpa-sec-2013-35)↗2013-06-07

▶

Debian

CVE-2013-4077: wireshark - Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows r...↗2013

▶

💬Community

Bugzilla

CVE-2013-4074 CVE-2013-4075 CVE-2013-4076 CVE-2013-4077 CVE-2013-4078 CVE-2013-4079 CVE-2013-4080 CVE-2013-4081 CVE-2013-4082 CVE-2013-4083 wireshark various flaws [fedora-18]↗2013-06-10

▶

Bugzilla

CVE-2013-4077 wireshark: Array index error in the NBAP dissector (wnpa-sec-2013-35)↗2013-06-10

▶