CVE-2013-3562: Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in th...

Security readout for executives and security teams

This CVE is a denial-of-service flaw in Wireshark's WebSocket packet parser. A malformed packet can crash affected Wireshark 1.8.x versions before 1.8.7. The main business impact is analyst tooling disruption, not confirmed data theft or system compromise. Exposure is limited to environments still running Wireshark 1.8.x before 1.8.7. Risk is most relevant where analysts inspect untrusted captures or live traffic that can trigger the WebSocket dissector. Treat this as a moderate operational risk for security and network teams using obsolete Wireshark. Prioritize remediation where analysts process external or adversary-supplied captures. Mitigation focus: Upgrade affected Wireshark 1.8.x installations to 1.8.7 or a vendor-fixed package.; Apply Debian, Gentoo, or openSUSE security updates where Wireshark is OS-managed.; Avoid opening untrusted packet captures on vulnerable Wireshark builds until updated..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.