CVE-2013-2480
The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow...
3.3 LowFix available
The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
Exploit likelihood
1.05%Down 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
CVE-2013-2480- CVSS 2.0
- 3.3 Low
AV:A/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
CVE-2013-2480- Updated
- 2026-11-02
EUVDEUVD-2013-2426 No score
The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
EUVD-2013-2426- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m73h-v7rm-phwf No score
The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow...
The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
GHSA-m73h-v7rm-phwf- Updated
- 2026-11-02
OSV No score
The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
CVE-2013-2480- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-2480 No score
The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
DEBIAN-CVE-2013-2480- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10199-1 No score
wireshark-2.2.2-1.1 on GA media
These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10199-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-2480 No score
The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
UBUNTU-CVE-2013-2480- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 1.8.2-5 | 1.8.2-5 |
wiresharkDebian:13 |
before 1.8.2-5 | 1.8.2-5 |
wiresharkDebian:14 |
before 1.8.2-5 | 1.8.2-5 |
wiresharkDebian:6.0 From an advisory covering 6 CVEs |
before 1.2.11-6+squeeze10, plus listed versions 1.2.11-61.2.11-6+squeeze11.2.11-6+squeeze21.2.11-6+squeeze41.2.11-6+squeeze5 Show 4 moreShow less1.2.11-6+squeeze61.2.11-6+squeeze71.2.11-6+squeeze81.2.11-6+squeeze9 |
1.2.11-6+squeeze10 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 262 CVEs |
before 2.2.2-1.1 | 2.2.2-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2480 is a low vulnerability (CVSS 3.3) in Wireshark, published March 7, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.05%, the 64th percentile. Fixed in wireshark 1.8.2-5.
References
wireshark.org/docs/relnotes/wireshark-1.6.14.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16630
lists.opensuse.org/opensuse-updates/2013-03/msg00065.html
bugs.wireshark.org/bugzilla/show_bug.cgi?id=8332
secunia.com/advisories/52471
Show 194 moreShow less
debian.org/security/2013/dsa-2644
nvd.nist.gov/vuln/detail/CVE-2013-2480
github.com/advisories/GHSA-m73h-v7rm-phwf
security-tracker.debian.org/tracker/CVE-2013-2480
ubuntu.com/security/CVE-2013-2480
cve.org/CVERecord?id=CVE-2013-2480
suse.com/security/cve/CVE-2009-1210
This page doesn't list everything
Left out here: 76 references. The JSON record has them.