Common Vulnerabilities and Exposures assigned an identifier CVE-2013-4930 to the following vulnerability: The dissect_dvbci_tpdu_hdr function in epan/dissectors/packet-dvbci.c in the DVB-CI dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not validate a certain length value before decrementing it, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet. References: [1] http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dvbci.c?r1=50474&r2=50473&pathrev=50474 [2] http://anonsvn.wireshark.org/viewvc?view=revision&revision=50474 [3] http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html [4] http://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html [5] https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8916 [6] https://www.wireshark.org/security/wnpa-sec-2013-48.html
Created wireshark tracking bugs for this issue: Affects: fedora-18 [bug 990189]
Statement: Not Vulnerable. This issue does not affect the version of wireshark, as shipped with Red Hat Enterprise Linux 5 and 6.
wireshark-1.10.2-6.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report.
wireshark-1.10.2-7.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
wireshark-1.10.2-4.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.