CVE-2013-3556

EUVD-2013-3491
The fragment_add_seq_common function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference during a comparison, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
wiresharkwireshark
1.6.0
wiresharkwireshark
1.6.1
wiresharkwireshark
1.6.2
wiresharkwireshark
1.6.3
wiresharkwireshark
1.6.4
wiresharkwireshark
1.6.5
wiresharkwireshark
1.6.6
wiresharkwireshark
1.6.7
wiresharkwireshark
1.6.8
wiresharkwireshark
1.6.9
wiresharkwireshark
1.6.10
wiresharkwireshark
1.6.11
wiresharkwireshark
1.6.12
wiresharkwireshark
1.6.13
wiresharkwireshark
1.6.14
debiandebian_linux
7.0
opensuseopensuse
11.4
opensuseopensuse
12.2
opensuseopensuse
12.3
wiresharkwireshark
1.8.0
wiresharkwireshark
1.8.1
wiresharkwireshark
1.8.2
wiresharkwireshark
1.8.3
wiresharkwireshark
1.8.4
wiresharkwireshark
1.8.5
wiresharkwireshark
1.8.6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
wireshark
bookworm
4.0.11-1~deb12u1
fixed
bookworm (security)
4.0.11-1~deb12u1
fixed
bullseye
3.4.10-0+deb11u1
fixed
bullseye (security)
3.4.16-0+deb11u1
fixed
sid
4.4.1-1
fixed
trixie
4.4.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wireshark
lucid
not-affected
precise
not-affected
quantal
not-affected
raring
not-affected