CVE-2013-1586 Denial of service in n/a

Low 2.9 Published 3 Feb 2013 Updated 6 Aug 2024

Remote attackers can crash Wireshark by sending malformed DTLS packets, requiring users to upgrade to patched versions.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2013-1586?

CVE-2013-1586 is a low-severity denial of service vulnerability in Wireshark Wireshark, published on 3 Feb 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The fragment_set_tot_len function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

Which versions are affected by CVE-2013-1586?

It affects 1 product.

Products include Wireshark Wireshark.

How do I fix CVE-2013-1586?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2013-1586 being exploited?

There is no known exploitation of CVE-2013-1586 in the wild and no public exploit code.

All Wireshark Wireshark vulnerabilities

Sources

Also known as DEBIAN-CVE-2013-1586, GHSA-3grx-qfww-j73p.