Lucene search

K
cveMitreCVE-2013-6338
HistoryNov 04, 2013 - 4:55 p.m.

CVE-2013-6338

2013-11-0416:55:05
CWE-20
mitre
web.nvd.nist.gov
41
wireshark
sip
dissector
cve-2013-6338
denial of service
vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.004

Percentile

73.2%

The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Affected configurations

Nvd
Node
wiresharkwiresharkMatch1.8.0
OR
wiresharkwiresharkMatch1.8.1
OR
wiresharkwiresharkMatch1.8.2
OR
wiresharkwiresharkMatch1.8.3
OR
wiresharkwiresharkMatch1.8.4
OR
wiresharkwiresharkMatch1.8.5
OR
wiresharkwiresharkMatch1.8.6
OR
wiresharkwiresharkMatch1.8.7
OR
wiresharkwiresharkMatch1.8.8
OR
wiresharkwiresharkMatch1.8.9
OR
wiresharkwiresharkMatch1.8.10
OR
wiresharkwiresharkMatch1.10.0
OR
wiresharkwiresharkMatch1.10.1
OR
wiresharkwiresharkMatch1.10.2
VendorProductVersionCPE
wiresharkwireshark1.8.0cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*
wiresharkwireshark1.8.1cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*
wiresharkwireshark1.8.2cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*
wiresharkwireshark1.8.3cpe:2.3:a:wireshark:wireshark:1.8.3:*:*:*:*:*:*:*
wiresharkwireshark1.8.4cpe:2.3:a:wireshark:wireshark:1.8.4:*:*:*:*:*:*:*
wiresharkwireshark1.8.5cpe:2.3:a:wireshark:wireshark:1.8.5:*:*:*:*:*:*:*
wiresharkwireshark1.8.6cpe:2.3:a:wireshark:wireshark:1.8.6:*:*:*:*:*:*:*
wiresharkwireshark1.8.7cpe:2.3:a:wireshark:wireshark:1.8.7:*:*:*:*:*:*:*
wiresharkwireshark1.8.8cpe:2.3:a:wireshark:wireshark:1.8.8:*:*:*:*:*:*:*
wiresharkwireshark1.8.9cpe:2.3:a:wireshark:wireshark:1.8.9:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.004

Percentile

73.2%