CVE-2013-1582: The dissect_clnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before...

Security readout for executives and security teams

This issue can make vulnerable Wireshark versions hang or crash when they process a malformed CLNP packet. It affects old Wireshark 1.6.x and 1.8.x releases. The business impact is availability of packet-analysis workstations or monitoring workflows, not source-code execution or data theft based on the supplied sources. Exposure is most likely in legacy environments still running affected Wireshark versions or distribution packages from that era. Systems that inspect live traffic or open untrusted packet captures could encounter malformed CLNP input. Modern supported Wireshark versions are unlikely to be affected, but inventory should confirm this. Handle during normal vulnerability remediation, with higher priority for SOC, forensics, or network-monitoring teams using old Wireshark builds. The main risk is disruption of analysis capability. There is no supplied evidence of active exploitation or broader system compromise. Mitigation focus: Upgrade Wireshark to 1.6.13, 1.8.5, or a current supported release.; Apply Debian, openSUSE, or vendor package updates where Wireshark is managed by the OS.; Limit opening untrusted packet captures on vulnerable analysis workstations until patched..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.