The TCP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed packet.

wireshark was updated to 1.8.6 [bnc#807942]

  + vulnerabilities fixed :

  - The TCP dissector could crash. wnpa-sec-2013-10     CVE-2013-2475

  - The HART/IP dissectory could go into an infinite loop.
    wnpa-sec-2013-11 CVE-2013-2476

  - The CSN.1 dissector could crash. wnpa-sec-2013-12     CVE-2013-2477

  - The MS-MMS dissector could crash. wnpa-sec-2013-13     CVE-2013-2478

  - The MPLS Echo dissector could go into an infinite loop.
    wnpa-sec-2013-14 CVE-2013-2479

  - The RTPS and RTPS2 dissectors could crash.
    wnpa-sec-2013-15 CVE-2013-2480

  - The Mount dissector could crash. wnpa-sec-2013-16     CVE-2013-2481

  - The AMPQ dissector could go into an infinite loop.
    wnpa-sec-2013-17 CVE-2013-2482

  - The ACN dissector could attempt to divide by zero.
    wnpa-sec-2013-18 CVE-2013-2483

  - The CIMD dissector could crash. wnpa-sec-2013-19     CVE-2013-2484

  - The FCSP dissector could go into an infinite loop.
    wnpa-sec-2013-20 CVE-2013-2485

  - The RELOAD dissector could go into an infinite loop.
    wnpa-sec-2013-21 CVE-2013-2486 CVE-2013-2487

  - The DTLS dissector could crash. wnpa-sec-2013-22     CVE-2013-2488 

  + Further bug fixes and updated protocol support as listed     in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.h     tml

wireshark has been updated to 1.6.14 to fix bugs and security issues :

Vulnerabilities fixed :

  - The sFlow dissector could go into an infinite loop.
    wnpa-sec-2012-32 CVE-2012-6054: * The SCTP dissector     could go into an infinite loop. wnpa-sec-2012-33     CVE-2012-6056: * The MS-MMS dissector could crash.
    wnpa-sec-2013-13 CVE-2013-2478

  - The RTPS and RTPS2 dissectors could crash.
    wnpa-sec-2013-15 CVE-2013-2480: * The Mount dissector     could crash. wnpa-sec-2013-16 CVE-2013-2481

  - The AMPQ dissector could go into an infinite loop.
    wnpa-sec-2013-17 CVE-2013-2482: * The ACN dissector     could attempt to divide by zero. wnpa-sec-2013-18     CVE-2013-2483: * The CIMD dissector could crash.
    wnpa-sec-2013-19 CVE-2013-2484

  - The FCSP dissector could go into an infinite loop.
    wnpa-sec-2013-20 CVE-2013-2485: * The DTLS dissector     could crash. wnpa-sec-2013-22 CVE-2013-2488

Further bug fixes and updated protocol support are listed in :

http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html

wireshark has been updated to 1.8.6 which fixes bugs and security issues :

Vulnerabilities fixed :

  - The TCP dissector could crash. wnpa-sec-2013-10.
    (CVE-2013-2475)

  - The HART/IP dissectory could go into an infinite loop.
    wnpa-sec-2013-11. (CVE-2013-2476)

  - The CSN.1 dissector could crash. wnpa-sec-2013-12.
    (CVE-2013-2477)

  - The MS-MMS dissector could crash. wnpa-sec-2013-13.
    (CVE-2013-2478)

  - The MPLS Echo dissector could go into an infinite loop.
    wnpa-sec-2013-14. (CVE-2013-2479)

  - The RTPS and RTPS2 dissectors could crash.
    wnpa-sec-2013-15. (CVE-2013-2480)

  - The Mount dissector could crash. wnpa-sec-2013-16.
    (CVE-2013-2481)

  - The AMPQ dissector could go into an infinite loop.
    wnpa-sec-2013-17. (CVE-2013-2482)

  - The ACN dissector could attempt to divide by zero.
    wnpa-sec-2013-18. (CVE-2013-2483)

  - The CIMD dissector could crash. wnpa-sec-2013-19.
    (CVE-2013-2484)

  - The FCSP dissector could go into an infinite loop.
    wnpa-sec-2013-20. (CVE-2013-2485)

  - The RELOAD dissector could go into an infinite loop.
    wnpa-sec-2013-21. (CVE-2013-2486 / CVE-2013-2487)

  - The DTLS dissector could crash. wnpa-sec-2013-22     (CVE-2013-2488) More information about further bug fixes     and updated protocol support are listed here:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.h     tml

The installed version of Wireshark 1.8 is earlier than 1.8.6.  It is, therefore, affected by the following vulnerabilities :

  - Errors exist in the CSN.1, CIMD, DTLS, Mount, MS-MMS,     RTPS, RTPS2, and TCP dissectors that could allow them     to crash. (Bugs 8274, 8332, 8335, 8346, 8380, 8382)

  - Errors exist in the AMPQ, FCSP, HART/IP, MPLS Echo,     and RELOAD dissectors that could lead to an infinite     loop, resulting in a denial of service. (Bugs 8039,     8337, 8359, 8360, 8364)

  - The ACN dissector can attempt a divide by zero     operation that could lead to an application crash.
    (Bug 8340)

ID	Name	Product	Family	Severity
74930	openSUSE Security Update : wireshark (openSUSE-SU-2013:0494-1)	Nessus	SuSE Local Security Checks	high
66255	SuSE 10 Security Update : wireshark (ZYPP Patch Number 8500)	Nessus	SuSE Local Security Checks	high
66254	SuSE 11.2 Security Update : wireshark (SAT Patch Number 7490)	Nessus	SuSE Local Security Checks	high
65254	Wireshark 1.8.x < 1.8.6 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2013-2475

high

Tenable Plugins

high

high

high

high