CVE-2013-5717 - Vulnerability Details - OpenCVE

The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00205.

Key SSVC decision points have not yet been added.

Vendors	Products
Wireshark	Wireshark

Configuration 1 [-]

OR	cpe:2.3:a:wireshark:wireshark:1.10.0:::::::*
	cpe:2.3:a:wireshark:wireshark:1.10.1:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2013-5554	The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://anonsvn.wireshark.org/viewvc?view=revision&revision=51130
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8827
https://nvd.nist.gov/vuln/detail/CVE-2013-5717
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19030
https://www.cve.org/CVERecord?id=CVE-2013-5717
https://www.wireshark.org/security/wnpa-sec-2013-54.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2013-09-13T18:00:00

Updated: 2024-08-06T17:22:31.000Z

Reserved: 2013-09-11T00:00:00

Link: CVE-2013-5717

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2013-09-16T13:01:46.877

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-5717

Redhat

Severity : Low

Publid Date: 2013-09-10T00:00:00Z

Links: CVE-2013-5717 - Bugzilla

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2013-09-11T00:00:00", "descriptions": [{"lang": "en", "value": "The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-18T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://anonsvn.wireshark.org/viewvc?view=revision&revision=51130"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://www.wireshark.org/security/wnpa-sec-2013-54.html"}, {"name": "oval:org.mitre.oval:def:19030", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19030"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8827"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2013-5717", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://anonsvn.wireshark.org/viewvc?view=revision&revision=51130", "refsource": "CONFIRM", "url": "http://anonsvn.wireshark.org/viewvc?view=revision&revision=51130"}, {"name": "https://www.wireshark.org/security/wnpa-sec-2013-54.html", "refsource": "CONFIRM", "url": "https://www.wireshark.org/security/wnpa-sec-2013-54.html"}, {"name": "oval:org.mitre.oval:def:19030", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19030"}, {"name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8827", "refsource": "CONFIRM", "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8827"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T17:22:31.000Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://anonsvn.wireshark.org/viewvc?view=revision&revision=51130"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.wireshark.org/security/wnpa-sec-2013-54.html"}, {"name": "oval:org.mitre.oval:def:19030", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19030"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8827"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2013-5717", "datePublished": "2013-09-13T18:00:00", "dateReserved": "2013-09-11T00:00:00", "dateUpdated": "2024-08-06T17:22:31.000Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wireshark:wireshark:1.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "481435A6-4790-4B3E-8EEA-0394A6AB481A", "vulnerable": true}, {"criteria": "cpe:2.3:a:wireshark:wireshark:1.10.1:*:*:*:*:*:*:*", "matchCriteriaId": "2B0BB28A-9E61-4073-9BE2-C34AB2BCF1EB", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c."}, {"lang": "es", "value": "El disector de Bluetooth HCI ACL en Wireshark 1.10.x anteriores a v1.10.2 no mantiene correctamente una cierta lista libre, lo cual permite a atacantes remotos causar denegaci\u00f3n de servicio (ca\u00edda de aplicaci\u00f3n) a trav\u00e9s de un paquete manipulado que no es correctamente gestionado por la funci\u00f3n wmem_block_alloc en epan/wmem/wmem_allocator_bloc.c."}], "id": "CVE-2013-5717", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2013-09-16T13:01:46.877", "references": [{"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://anonsvn.wireshark.org/viewvc?view=revision&revision=51130"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8827"}, {"source": "cve@mitre.org", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19030"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.wireshark.org/security/wnpa-sec-2013-54.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://anonsvn.wireshark.org/viewvc?view=revision&revision=51130"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8827"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19030"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.wireshark.org/security/wnpa-sec-2013-54.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}