Wireshark NTLMSSP v2 Dissector Denial of Service Vulnerability

Bugtraq ID:	64412
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-7114
Remote:	Yes
Local:	No
Published:	Dec 17 2013 12:00AM
Updated:	Apr 02 2014 12:58AM
Credit:	Garming Sam
Vulnerable:	SuSE openSUSE 11.4 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 6
Not Vulnerable:

Wireshark NTLMSSP v2 Dissector Denial of Service Vulnerability

Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.

An attacker can leverage this issue to crash the affected application, denying service to legitimate users.

The following versions are affected:

Wireshark 1.8.0 through versions 1.8.11
Wireshark 1.10.0 through versions 1.10.3

Wireshark NTLMSSP v2 Dissector Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Wireshark NTLMSSP v2 Dissector Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Wireshark NTLMSSP v2 Dissector Denial of Service Vulnerability

References:

• Wireshark Homepage (Wireshark)