製品・ソフトウェアに関する情報

JVN脆弱性詳細

Wireshark における整数オーバーフローの脆弱性

Title	Wireshark における整数オーバーフローの脆弱性
Summary	Wireshark には、Websocket 解析機能のクラッシュ、MySQL 解析機能における無限ループ、および ETCH 解析機能における大きなループ (a large loop) に関する処理に不備があるため、整数オーバーフローの脆弱性が存在します。
Possible impacts	第三者により、不正な形式のパケットを介して、サービス運用妨害 (ループまたはアプリケーションクラッシュ) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	May 17, 2013, midnight
Registration Date	May 29, 2013, 4:26 p.m.
Last Update	Oct. 31, 2013, 6:16 p.m.

CVSS2.0 : 危険
Score	7.8
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected System

Wireshark

Wireshark 1.8.7 未満の 1.8.x

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2013-3561	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3561
National Vulnerability Database (NVD)
2	CVE-2013-3561	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-3561

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-189	https://jvndb.jvn.jp/ja/cwe/CWE-189.html

ベンダー情報

No	Name	URL
opensuse-updates
1	openSUSE-SU-2013:1084	http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
2	openSUSE-SU-2013:1086	http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html
SECURITY BLOG
3	Multiple vulnerabilities in Wireshark	https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark5
Wireshark
4	Diff of /trunk/epan/dissectors/packet-etch.c	http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-etch.c?r1=48919&r2=48918&pathrev=48919
5	Diff of /trunk/epan/dissectors/packet-mysql.c	http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mysql.c?r1=48894&r2=48893&pathrev=48894
6	Diff of /trunk/epan/dissectors/packet-websocket.c	http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-websocket.c?r1=48336&r2=48335&pathrev=48336
7	Revision 48336	http://anonsvn.wireshark.org/viewvc?view=revision&revision=48336
8	Revision 48894	http://anonsvn.wireshark.org/viewvc?view=revision&revision=48894
9	Revision 48919	http://anonsvn.wireshark.org/viewvc?view=revision&revision=48919
Wireshark Bug Database
10	Bug 8448	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8448
11	Bug 8458	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8458
12	Bug 8464	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8464
Wireshark Security Advisories
13	wnpa-sec-2013-29	http://www.wireshark.org/security/wnpa-sec-2013-29.html
14	wnpa-sec-2013-30	http://www.wireshark.org/security/wnpa-sec-2013-30.html
15	wnpa-sec-2013-31	http://www.wireshark.org/security/wnpa-sec-2013-31.html

Change Log

No	Changed Details	Date of change
0	[2013年05月29日] 掲載 [2013年07月08日] ベンダ情報：openSUSE (openSUSE-SU-2013:1086) を追加ベンダ情報：openSUSE (openSUSE-SU-2013:1084) を追加 [2013年10月31日] ベンダ情報：オラクル (Multiple vulnerabilities in Wireshark) を追加	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2013-3561

Summary	Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector.
Publication Date	May 25, 2013, 12:18 p.m.
Registration Date	Jan. 26, 2021, 3:41 p.m.
Last Update	Nov. 21, 2024, 10:53 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:opensuse:opensuse:12.3:::::::*
cpe:2.3:o:debian:debian_linux:7.0:::::::*
cpe:2.3:o:opensuse:opensuse:11.4:::::::*
cpe:2.3:o:opensuse:opensuse:12.2:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:wireshark:wireshark:1.8.6:::::::*
cpe:2.3:a:wireshark:wireshark:1.8.2:::::::*
cpe:2.3:a:wireshark:wireshark:1.8.3:::::::*
cpe:2.3:a:wireshark:wireshark:1.8.1:::::::*
cpe:2.3:a:wireshark:wireshark:1.8.0:::::::*
cpe:2.3:a:wireshark:wireshark:1.8.4:::::::*
cpe:2.3:a:wireshark:wireshark:1.8.5:::::::*

Related information, measures and tools

No	URL	タグ
1	http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-etch.c?r1=48919&r2=48918&pathrev=48919
2	http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-etch.c?r1=48919&r2=48918&pathrev=48919
3	http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mysql.c?r1=48894&r2=48893&pathrev=48894
4	http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mysql.c?r1=48894&r2=48893&pathrev=48894
5	http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-websocket.c?r1=48336&r2=48335&pathrev=48336
6	http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-websocket.c?r1=48336&r2=48335&pathrev=48336
7	http://anonsvn.wireshark.org/viewvc?view=revision&revision=48336	Patch
8	http://anonsvn.wireshark.org/viewvc?view=revision&revision=48336	Patch
9	http://anonsvn.wireshark.org/viewvc?view=revision&revision=48894	Patch
10	http://anonsvn.wireshark.org/viewvc?view=revision&revision=48894	Patch
11	http://anonsvn.wireshark.org/viewvc?view=revision&revision=48919	Patch
12	http://anonsvn.wireshark.org/viewvc?view=revision&revision=48919	Patch
13	http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html
14	http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html
15	http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html
16	http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html
17	http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
18	http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
19	http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html
20	http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html
21	http://secunia.com/advisories/53425
22	http://secunia.com/advisories/53425
23	http://secunia.com/advisories/54425
24	http://secunia.com/advisories/54425
25	http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml
26	http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml
27	http://www.wireshark.org/security/wnpa-sec-2013-29.html	Vendor Advisory
28	http://www.wireshark.org/security/wnpa-sec-2013-29.html	Vendor Advisory
29	http://www.wireshark.org/security/wnpa-sec-2013-30.html	Vendor Advisory
30	http://www.wireshark.org/security/wnpa-sec-2013-30.html	Vendor Advisory
31	http://www.wireshark.org/security/wnpa-sec-2013-31.html	Vendor Advisory
32	http://www.wireshark.org/security/wnpa-sec-2013-31.html	Vendor Advisory
33	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8448
34	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8448
35	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8458
36	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8458
37	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8464
38	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8464
39	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16755
40	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16755

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-189	数値処理の問題	https://cwe.mitre.org/data/definitions/189.html

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:wireshark:wireshark:1.8.6:::::::*
cpe:2.3:a:wireshark:wireshark:1.8.2:::::::*
cpe:2.3:a:wireshark:wireshark:1.8.3:::::::*
cpe:2.3:a:wireshark:wireshark:1.8.1:::::::*
cpe:2.3:a:wireshark:wireshark:1.8.0:::::::*
cpe:2.3:a:wireshark:wireshark:1.8.4:::::::*
cpe:2.3:a:wireshark:wireshark:1.8.5:::::::*