Wireshark ASN.1 BER Dissector CVE-2013-3556 Denial of Service Vulnerability

Bugtraq ID:	59997
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-3556
Remote:	Yes
Local:	No
Published:	May 17 2013 12:00AM
Updated:	Sep 26 2013 12:17AM
Credit:	Wireshark
Vulnerable:	Wireshark Wireshark 1.6.8 Wireshark Wireshark 1.6.7 Wireshark Wireshark 1.6.6 Wireshark Wireshark 1.6.5 Wireshark Wireshark 1.6.4 Wireshark Wireshark 1.6.3 Wireshark Wireshark 1.6.2 Wireshark Wireshark 1.6.1 Wireshark Wireshark 1.6 SuSE openSUSE 11.4 Gentoo Linux
Not Vulnerable:

Wireshark ASN.1 BER Dissector CVE-2013-3556 Denial of Service Vulnerability

Wireshark is prone to a denial-of-service vulnerability.

An attacker can leverage this issue to crash the affected application, denying service to legitimate users.

Wireshark versions 1.8.0 through 1.8.6 and 1.6.0 through 1.6.14 are vulnerable.

Wireshark ASN.1 BER Dissector CVE-2013-3556 Denial of Service Vulnerability

A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.
[email protected]

Wireshark ASN.1 BER Dissector CVE-2013-3556 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Wireshark ASN.1 BER Dissector CVE-2013-3556 Denial of Service Vulnerability

References:

• Wireshark Homepage (Wireshark)