Wireshark DTLS Dissector Denial of Service Vulnerability

Bugtraq ID:	57621
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-1586
Remote:	Yes
Local:	No
Published:	Jan 29 2013 12:00AM
Updated:	Mar 08 2013 11:44AM
Credit:	Laurent Butti
Vulnerable:	Wireshark Wireshark 1.6.8 Wireshark Wireshark 1.6.7 Wireshark Wireshark 1.6.6 Wireshark Wireshark 1.6.5 Wireshark Wireshark 1.6.4 Wireshark Wireshark 1.6.3 Wireshark Wireshark 1.6.2 Wireshark Wireshark 1.6.1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Wireshark DTLS Dissector Denial of Service Vulnerability

Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.

Attackers can exploit this issue to cause the application to crash, resulting in denial-of-service conditions.

The following products are affected:

Wireshark 1.6.0 through versions 1.6.12
Wireshark 1.8.0 through versions 1.8.4

Wireshark DTLS Dissector Denial of Service Vulnerability

A sample pcap file is available. Please see the references for information.

Wireshark DTLS Dissector Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Wireshark DTLS Dissector Denial of Service Vulnerability

References:

• Wireshark Homepage (Wireshark)