CVE-2013-2481 describes an integer signedness error in the Wireshark Mount dissector (versions 1.6.x before 1.6.14 and 1.8.x before 1.8.6) that can lead to a denial of service (application crash) when processing a negative length value. This vulnerability affects Wireshark installations on Debian and openSUSE. With a CVSS score of 2.9, this vulnerability is considered low severity, requiring adjacent network access and medium attack complexity to achieve a partial impact on availability. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.8.0CPE matchmatch criteria | cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:* | ||
1.8.1CPE matchmatch criteria | cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:* | ||
1.8.2CPE matchmatch criteria | cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:* | ||
1.8.3CPE matchmatch criteria | cpe:2.3:a:wireshark:wireshark:1.8.3:*:*:*:*:*:*:* | ||
1.8.4CPE matchmatch criteria | cpe:2.3:a:wireshark:wireshark:1.8.4:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:A/AC:M/Au:N/C:N/I:N/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.