Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large value for a span length.
Platform | Package | Release Date | Advisory |
---|---|---|---|
Amazon Linux 1 | wireshark | 2013-12-02 20:29 | ALAS-2013-251 |
Score Type | Score | Vector | |
---|---|---|---|
Amazon Linux | CVSSv2 | 4.3 | AV:N/AC:M/Au:N/C:N/I:N/A:P |
NVD | CVSSv2 | 3.3 | AV:A/AC:L/Au:N/C:N/I:N/A:P |