Bug 906351 – CVE-2013-1588 wireshark: DCP-ETSI dissector crash (wnpa-sec-2013-07, bug 8213)

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 906351 - (CVE-2013-1588) CVE-2013-1588 wireshark: DCP-ETSI dissector crash (wnpa-sec-2013-07, bug 8213)

Summary:	CVE-2013-1588 wireshark: DCP-ETSI dissector crash (wnpa-sec-2013-07, bug 8213)

Status:	CLOSED NOTABUG

Aliases:	CVE-2013-1588

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=moderate,public=20130129,repor...
Keywords:	Security

Depends On:	906387
Blocks:	906403
	Show dependency tree / graph

Reported:	2013-01-31 08:43 EST by Jan Lieskovsky
Modified:	2013-02-04 00:46 EST (History)
CC List:	5 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2013-02-04 00:46:34 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Jan Lieskovsky 2013-01-31 08:43:51 EST

A security flaw was found in the way DCP-ETSI dissector of Wireshark, a network traffic analyzer, performed dissection of certain DCP-ETSI packet capture files. A remote attacker could provide a specially-crafted DCP-ETSI packet / packet capture that, when processed, would lead to tshark executable crash or, potentially, arbitrary code execution with the privileges of the user running the executable, when trying to process the crafted packet / packet capture file.

Upstream bug report:
[1] https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8213

Sample packet capture:
[2] https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8213#c0

Relevant upstream patch:
[3] http://anonsvn.wireshark.org/viewvc?view=revision&revision=47098

References:
[4] http://www.wireshark.org/security/wnpa-sec-2013-07.html
[5] http://www.openwall.com/lists/oss-security/2013/01/31/2

Comment 1 Jan Lieskovsky 2013-01-31 10:20:30 EST

Created wireshark tracking bugs for this issue

Affects: fedora-all [bug 906387]

Comment 2 Huzaifa S. Sidhpurwala 2013-02-04 00:46:34 EST

Statement:

Not Vulnerable. This issue does not affect the version of wireshark as shipped with Red Hat Enterprise Linux 5 and 6.

Note You need to log in before you can comment on or make changes to this bug.