medium5.0Public exploit code
CVE-2013-4074
The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wireshark CAPWAP Dissector - Denial of Service (Metasploit)2014-05-28 · dos · multiple · Verified
Impact
The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wireshark | Wireshark | Versions 1.6.0, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5 |
| Debian | Debian Linux | Version 7.0 |
| Opensuse | Opensuse | Versions 11.4, 12.2, 12.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-capwap.c?r1=43716&r2=43715&pathrev=43716
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=43716
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html
- http://osvdb.org/show/osvdb/94091
- http://packetstormsecurity.com/files/126848/Wireshark-CAPWAP-Dissector-Denial-Of-Service.html
- http://secunia.com/advisories/53762
- http://secunia.com/advisories/54425
- http://www.debian.org/security/2013/dsa-2709
- http://www.exploit-db.com/exploits/33556
- http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:172
- http://www.wireshark.org/docs/relnotes/wireshark-1.6.16.html
- http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html
- http://www.wireshark.org/security/wnpa-sec-2013-32.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8725
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16698
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-capwap.c?r1=43716&r2=43715&pathrev=43716
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=43716
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html
- http://osvdb.org/show/osvdb/94091
- http://packetstormsecurity.com/files/126848/Wireshark-CAPWAP-Dissector-Denial-Of-Service.html
- http://secunia.com/advisories/53762
- http://secunia.com/advisories/54425