VDB
DEBIAN-CVE-2013-2488
DEBIAN-CVE-2013-2488
PUBLISHED
CVSS 8.699999809265137 HIGH
The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service (application crash) via a large offset value that triggers write access to an invalid memory location.
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | wireshark | 0, 0, 0 |
| Debian:11 | wireshark | 0, 0, 0 |
| Debian:14 | wireshark | 0, 0, 0 |
| Debian:12 | wireshark | 0, 0, 0 |
Timeline
- Mar 7, 2013 CVE Published
- Apr 28, 2026 CVE Updated