CVE-2013-5717

The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:wireshark:wireshark:1.10.0:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.10.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2013-09-16 13:01

Updated : 2024-02-28 12:00


NVD link : CVE-2013-5717

Mitre link : CVE-2013-5717

CVE.ORG link : CVE-2013-5717


JSON object : View

Products Affected

wireshark

  • wireshark
CWE
CWE-20

Improper Input Validation