Code injection

The dissectmplsechotlvddmap function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via invalid Sub-tlv data...

CVE-2013-2479

The dissectmplsechotlvddmap function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via invalid Sub-tlv data...

CVE-2013-2479

Wireshark 1.8.x before 1.8.6 is vulnerable in the MPLS Echo dissector (function dissect_mpls_echo_tlv_dd_map). Processing invalid Sub-tlv data can cause an infinite loop, leading to denial of service. Upgrade to Wireshark 1.8.6 or later (as noted in multiple advisories) to mitigate.