Wireshark SIP Dissector 'packet-sip.c' Denial of Service Vulnerability
BID:64411
Info
Wireshark SIP Dissector 'packet-sip.c' Denial of Service Vulnerability
| Bugtraq ID: | 64411 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2013-7112 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 17 2013 12:00AM |
| Updated: | May 08 2014 12:52AM |
| Credit: | Alain Botti |
| Vulnerable: |
SuSE openSUSE 11.4 RedHat Enterprise Linux Desktop Workstation 5 client Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux 5 Server Oracle Enterprise Linux 5 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 CentOS CentOS 6 CentOS CentOS 5 Avaya Proactive Contact 5.0 Avaya IP Office Application Server 8.1 Avaya IP Office Application Server 8.0 Avaya Communication Server 1000M Signaling Server 7.5 Avaya Communication Server 1000M Signaling Server 7.0 Avaya Communication Server 1000M 7.5 Avaya Communication Server 1000M 7.0 Avaya Communication Server 1000E Signaling Server 7.5 Avaya Communication Server 1000E Signaling Server 7.0 Avaya Communication Server 1000E 7.5 Avaya Communication Server 1000E 7.0 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.1 Avaya Aura System Manager 6.2 Avaya Aura System Manager 6.1.3 Avaya Aura System Manager 6.1.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura Session Manager 6.2.1 Avaya Aura Session Manager 6.1.3 Avaya Aura Session Manager 6.1.2 Avaya Aura Session Manager 6.1.1 Avaya Aura Session Manager 6.2 Avaya Aura Messaging 6.1 Avaya Aura Messaging 6.0.1 Avaya Aura Messaging 6.0 Avaya Aura Communication Manager 6.0.1 Avaya Aura Communication Manager 6.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 6.1.1 Avaya Aura Application Enablement Services 6.1 Avaya Aura Application Enablement Services 5.2.3 Avaya Aura Application Enablement Services 5.2.2 Avaya Aura Application Enablement Services 5.2 |
| Not Vulnerable: | |
Discussion
Wireshark SIP Dissector 'packet-sip.c' Denial of Service Vulnerability
Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.
An attacker can exploit this issue to trigger an infinite loop causing the affected application to crash, denying service to legitimate users. The following versions are affected:
Wireshark 1.8.0 through versions 1.8.11
Wireshark 1.10.0 through versions 1.10.3
Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.
An attacker can exploit this issue to trigger an infinite loop causing the affected application to crash, denying service to legitimate users. The following versions are affected:
Wireshark 1.8.0 through versions 1.8.11
Wireshark 1.10.0 through versions 1.10.3
Exploit / POC
Wireshark SIP Dissector 'packet-sip.c' Denial of Service Vulnerability
A sample pcap file is available. Please see the references for information.
A sample pcap file is available. Please see the references for information.
Solution / Fix
Wireshark SIP Dissector 'packet-sip.c' Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Wireshark SIP Dissector 'packet-sip.c' Denial of Service Vulnerability
References:
References:
- Wireshark Homepage (Wireshark)