Stack consumption vulnerability in the dissect_ber_choice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service (infinite loop) via vectors involving self-referential ASN.1 CHOICE values.

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.00746
Percentile: 0.7207

CVSS Scoring

Mapped CWE(s)

• CWE-835 : Loop with Unreachable Exit Condition ('Infinite Loop')

Affected Products

• cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.3:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.4:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.5:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.6:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.7:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.8:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.9:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.10:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.11:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.12:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.13:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.14:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.2.15:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.4.2:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.4.3:*:*:*:*:*:*:*
• cpe:2.3:a:wireshark:wireshark:1.4.4:*:*:*:*:*:*:*

← Back to Home