CVE-2013-4077
Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers...
Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.
Exploit likelihood
What each source reports
NVD Score used
Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.
- Record
CVE-2013-4077- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.
- Record
CVE-2013-4077- Updated
- 2026-11-02
EUVDEUVD-2013-4008 No score
Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.
- Record
EUVD-2013-4008- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9f36-vv9p-qwvm No score
Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers...
Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.
- Record
GHSA-9f36-vv9p-qwvm- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.
- Record
CVE-2013-4077- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4077 No score
Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.
- Record
DEBIAN-CVE-2013-4077- Updated
- 2026-11-02
Show 5 moreShow less
OSVMGASA-2013-0181 No score
Updated wireshark packages fix multiple security vulnerabilities
The CAPWAP dissector could crash (CVE-2013-4074).
The GMR-1 BCCH dissector could crash (CVE-2013-4075).
The PPP dissector could crash (CVE-2013-4076).
The NBAP dissector could crash (CVE-2013-4077).
The RDP dissector could crash (CVE-2013-4078).
The GSM CBCH dissector could crash (CVE-2013-4079).
The Assa Abloy R3 dissector could consume excessive memory and CPU (CVE-2013-4080).
The HTTP dissector could overrun the stack (CVE-2013-4081).
The Ixia IxVeriWave file parser could overflow the heap (CVE-2013-4082).
The DCP ETSI dissector could crash (CVE-2013-4083).
- Record
MGASA-2013-0181- Updated
- 2026-11-02
OSVSUSE-SU-2015:0426-1 No score
Security update for wireshark
wireshark has been updated to version 1.10.11 to fix five security issues.
These security issues have been fixed:
* SigComp UDVM buffer overflow (CVE-2014-8710).
* AMQP dissector crash (CVE-2014-8711).
* NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).
* TN5250 infinite loops (CVE-2014-8714).
This non-security issue has been fixed:
* enable zlib (bnc#899303).
Further bug fixes and updated protocol support as listed in:
https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html
Security Issues:
* CVE-2014-8711
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711>
* CVE-2014-8710
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710>
* CVE-2014-8714
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714>
* CVE-2014-8712
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712>
* CVE-2014-8713
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713>
- Record
SUSE-SU-2015:0426-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0653-1 No score
Security update for wireshark
wireshark has been updated to version 1.10.11 to fix five security issues.
These security issues have been fixed:
* SigComp UDVM buffer overflow (CVE-2014-8710).
* AMQP dissector crash (CVE-2014-8711).
* NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).
* TN5250 infinite loops (CVE-2014-8714).
This non-security issue has been fixed:
* enable zlib (bnc#899303).
Further bug fixes and updated protocol support as listed in:
https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html
Security Issues:
* CVE-2014-8711
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711>
* CVE-2014-8710
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710>
* CVE-2014-8714
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714>
* CVE-2014-8712
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712>
* CVE-2014-8713
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713>
- Record
SUSE-SU-2015:0653-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1098-1 No score
Security update for wireshark
wireshark has been updated to version 1.10.11 to fix five security issues.
These security issues have been fixed:
* SigComp UDVM buffer overflow (CVE-2014-8710).
* AMQP dissector crash (CVE-2014-8711).
* NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).
* TN5250 infinite loops (CVE-2014-8714).
This non-security issue has been fixed:
* enable zlib (bnc#899303).
Further bug fixes and updated protocol support as listed in:
https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html
Security Issues:
* CVE-2014-8711
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711>
* CVE-2014-8710
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710>
* CVE-2014-8714
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714>
* CVE-2014-8712
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712>
* CVE-2014-8713
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713>
- Record
SUSE-SU-2015:1098-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-4077 No score
Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.
- Record
UBUNTU-CVE-2013-4077- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 1.10.0-1 | 1.10.0-1 |
wiresharkDebian:13 |
before 1.10.0-1 | 1.10.0-1 |
wiresharkDebian:14 |
before 1.10.0-1 | 1.10.0-1 |
wiresharkDebian:7 From an advisory covering 8 CVEs |
before 1.8.2-5wheezy4, plus listed versions 1.8.2-5wheezy21.8.2-5wheezy3 |
1.8.2-5wheezy4 |
wiresharkMageia:3 From an advisory covering 10 CVEs |
before 1.8.8-1.mga3 | 1.8.8-1.mga3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4077 is a medium vulnerability (CVSS 5.0) in Wireshark, published June 9, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.95%, the 87th percentile. Fixed in wireshark 1.10.0-1.
References
wireshark.org/docs/relnotes/wireshark-1.8.8.html
secunia.com/advisories/53762
bugs.wireshark.org/bugzilla/show_bug.cgi?id=8697
anonsvn.wireshark.org/viewvc?view=revision&revision=49418
Show 124 moreShow less
gentoo.org/security/en/glsa/glsa-201308-05.xml
lists.opensuse.org/opensuse-updates/2013-06/msg00196.html
debian.org/security/2013/dsa-2709
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16829
nvd.nist.gov/vuln/detail/CVE-2013-4077
github.com/advisories/GHSA-9f36-vv9p-qwvm
security-tracker.debian.org/tracker/CVE-2013-4077
advisories.mageia.org/MGASA-2013-0181.html
bugs.mageia.org/show_bug.cgi?id=10471
suse.com/support/update/announcement/2015/suse-su-20150426-1
bugzilla.suse.com/813217
ubuntu.com/security/CVE-2013-4077
cve.org/CVERecord?id=CVE-2013-4077