« Volver al listado

CVE-2013-3559

Estado: ModificadaMedia (5)—

epan/dissectors/packet-dcp-etsi.c en el disector DCP ETSI en Wireshar v1.8.x antes de v1.8.7 utiliza tipos de datos enteros incorrectos, lo que permite a atacantes remotos provocar una denegación de servicio (desbordamiento de enteros y corrupción de memoria dinámica o referencia a un puntero NULL y caída de aplicación) a través de un paquete mal formado.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Debian — Debian LinuxOpensuse — OpensuseWireshark — Wireshark

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-3559",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-05-25T03:18:16.077",
  "references": [
    {
      "url": "http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=48644&r2=48643&pathrev=48644",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://anonsvn.wireshark.org/viewvc?view=revision&revision=48644",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0341.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/53425",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/54425",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2700",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.wireshark.org/security/wnpa-sec-2013-27.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8231",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8540",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8541",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16228",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=48644&r2=48643&pathrev=48644",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://anonsvn.wireshark.org/viewvc?view=revision&revision=48644",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0341.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/53425",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/54425",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2700",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.wireshark.org/security/wnpa-sec-2013-27.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8231",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8540",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8541",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16228",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-189"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer dereference, and application crash) via a malformed packet."
    },
    {
      "lang": "es",
      "value": "epan/dissectors/packet-dcp-etsi.c en el disector DCP ETSI en Wireshar v1.8.x antes de v1.8.7 utiliza tipos de datos enteros incorrectos, lo que permite a atacantes remotos provocar una denegación de servicio (desbordamiento de enteros y corrupción de memoria dinámica o referencia a un puntero NULL y caída de aplicación) a través de un paquete mal formado."
    }
  ],
  "lastModified": "2026-06-16T23:55:23.817",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
            },
            {
              "criteria": "cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE554781-1EB9-446E-911F-6C11970C47F4"
            },
            {
              "criteria": "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D806A17E-B8F9-466D-807D-3F1E77603DC8"
            },
            {
              "criteria": "cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFBF430B-0832-44B0-AA0E-BA9E467F7668"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "606DF728-1DA6-4989-B40A-44471CC677DB"
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F824AE6B-B087-4C69-8F73-7B146920FC3C"
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6702EAA1-7FBD-4755-B7C2-C2B3A1AFF142"
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF6D1967-500E-4E96-A6D2-CE17EA839572"
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8400AD4-ECE9-4810-B559-D4EB03AECC50"
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "424B66E9-56F8-4D87-94C6-80F5EA0BD1B2"
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6BD261DB-1794-473F-BAD9-E5B7771288BD"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}