CVE-2013-2486: The dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Disc...

Security readout for executives and security teams

CVE-2013-2486 is a denial-of-service flaw in Wireshark’s RELOAD dissector. A specially crafted packet can make affected Wireshark 1.8.x versions before 1.8.6 enter an infinite loop while parsing traffic, potentially freezing analysis workflows. The sources do not indicate code execution or confirmed active exploitation. Exposure is most likely on analyst workstations or systems using affected Wireshark 1.8.x builds to inspect live traffic or capture files containing RELOAD packets. Organizations that no longer run Wireshark 1.8.x are unlikely to be affected. Treat this as a focused operational resilience issue, not an enterprise-wide emergency. Patch affected Wireshark installations, especially where teams analyze untrusted traffic. Business urgency is moderate because impact is denial of service and the supplied sources do not show active exploitation. Mitigation focus: Upgrade Wireshark 1.8.x installations to 1.8.6 or later.; Apply vendor-provided fixed Wireshark packages for affected distributions.; Prioritize analyst systems that process untrusted packet captures or live traffic..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.