CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-1580

The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 45.5%

CVSS Severity

CVSS v2 Score 2.9

References

Products affected by CVE-2013-1580

Wireshark » Wireshark » Version: 1.6.0

cpe:2.3:a:wireshark:wireshark:1.6.0
Wireshark » Wireshark » Version: 1.6.1

cpe:2.3:a:wireshark:wireshark:1.6.1
Wireshark » Wireshark » Version: 1.6.10

cpe:2.3:a:wireshark:wireshark:1.6.10
Wireshark » Wireshark » Version: 1.6.11

cpe:2.3:a:wireshark:wireshark:1.6.11
Wireshark » Wireshark » Version: 1.6.12

cpe:2.3:a:wireshark:wireshark:1.6.12
Wireshark » Wireshark » Version: 1.6.2

cpe:2.3:a:wireshark:wireshark:1.6.2
Wireshark » Wireshark » Version: 1.6.3

cpe:2.3:a:wireshark:wireshark:1.6.3
Wireshark » Wireshark » Version: 1.6.4

cpe:2.3:a:wireshark:wireshark:1.6.4
Wireshark » Wireshark » Version: 1.6.5

cpe:2.3:a:wireshark:wireshark:1.6.5
Wireshark » Wireshark » Version: 1.6.6

cpe:2.3:a:wireshark:wireshark:1.6.6
Wireshark » Wireshark » Version: 1.6.7

cpe:2.3:a:wireshark:wireshark:1.6.7
Wireshark » Wireshark » Version: 1.6.8

cpe:2.3:a:wireshark:wireshark:1.6.8
Wireshark » Wireshark » Version: 1.6.9

cpe:2.3:a:wireshark:wireshark:1.6.9
Wireshark » Wireshark » Version: 1.8.0

cpe:2.3:a:wireshark:wireshark:1.8.0
Wireshark » Wireshark » Version: 1.8.1

cpe:2.3:a:wireshark:wireshark:1.8.1
Wireshark » Wireshark » Version: 1.8.2

cpe:2.3:a:wireshark:wireshark:1.8.2
Wireshark » Wireshark » Version: 1.8.3

cpe:2.3:a:wireshark:wireshark:1.8.3
Wireshark » Wireshark » Version: 1.8.4

cpe:2.3:a:wireshark:wireshark:1.8.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-1580

Products

Pricing

Contact Us