CVE-2013-5718

The dissect_nbap_T_dCH_ID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dch_id value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

• CWE-264

• http://anonsvn.wireshark.org/viewvc?view=revision&revision=51195Patch
• http://lists.opensuse.org/opensuse-updates/2013-09/msg00050.html
• http://lists.opensuse.org/opensuse-updates/2013-09/msg00052.html
• http://secunia.com/advisories/54812Vendor Advisory
• http://secunia.com/advisories/55022Vendor Advisory
• http://www.debian.org/security/2013/dsa-2756
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9005Patch
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18784
• https://www.wireshark.org/security/wnpa-sec-2013-55.htmlPatch, Vendor Advisory
• http://anonsvn.wireshark.org/viewvc?view=revision&revision=51195Patch
• http://lists.opensuse.org/opensuse-updates/2013-09/msg00050.html
• http://lists.opensuse.org/opensuse-updates/2013-09/msg00052.html
• http://secunia.com/advisories/54812Vendor Advisory
• http://secunia.com/advisories/55022Vendor Advisory
• http://www.debian.org/security/2013/dsa-2756
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9005Patch
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18784
• https://www.wireshark.org/security/wnpa-sec-2013-55.htmlPatch, Vendor Advisory

Published

Sep 16, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-5710The nullfs implementation in sys/fs/nullfs/null_vnops.c in t…
• CVE-2013-5711Cross-site scripting (XSS) vulnerability in admin/walkthroug…
• CVE-2013-5714Multiple cross-site scripting (XSS) vulnerabilities in ls/ht…
• CVE-2013-5715Buffer overflow in Gretech GOM Media Player before 2.2.53.51…
• CVE-2013-5716Gretech GOM Media Player 2.2.53.5169 and possibly earlier al…
• CVE-2013-5717The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1…
• CVE-2013-5719epan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in…
• CVE-2013-5720Buffer overflow in the RTPS dissector in Wireshark 1.8.x bef…
• CVE-2013-5721The dissect_mq_rr function in epan/dissectors/packet-mq.c in…
• CVE-2013-5722Unspecified vulnerability in the LDAP dissector in Wireshark…
• CVE-2013-5723SQL injection vulnerability in SAP NetWeaver 7.30 allows rem…
• CVE-2013-5724Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writa…