CVE-2013-2477
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers,...
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
Exploit likelihood
What each source reports
NVD Score used
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
CVE-2013-2477- CVSS 2.0
- 3.3 Low
AV:A/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
CVE-2013-2477- Updated
- 2026-11-02
EUVDEUVD-2013-2423 No score
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
EUVD-2013-2423- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pcw5-g97m-x7g5 No score
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers,...
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
GHSA-pcw5-g97m-x7g5- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
CVE-2013-2477- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-2477 No score
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
DEBIAN-CVE-2013-2477- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10199-1 No score
wireshark-2.2.2-1.1 on GA media
These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10199-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-2477 No score
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
UBUNTU-CVE-2013-2477- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2477 is a low vulnerability (CVSS 3.3) in Wireshark, published March 7, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.99%, the 62nd percentile. Fixed in wireshark 1.8.2-5.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16589
wireshark.org/security/wnpa-sec-2013-12.html
lists.opensuse.org/opensuse-updates/2013-03/msg00065.html
secunia.com/advisories/52471
Show 194 moreShow less
anonsvn.wireshark.org/viewvc?view=revision&revision=47888
bugs.wireshark.org/bugzilla/show_bug.cgi?id=8383
nvd.nist.gov/vuln/detail/CVE-2013-2477
github.com/advisories/GHSA-pcw5-g97m-x7g5
security-tracker.debian.org/tracker/CVE-2013-2477
ubuntu.com/security/CVE-2013-2477
cve.org/CVERecord?id=CVE-2013-2477
suse.com/security/cve/CVE-2009-1210
Left out here: 75 references. The JSON record has them.