PT-2014-1763 · Wireshark+3 · Wireshark+3

Published 2014-09-18 · Updated 2024-06-15 · CVE-2014-6426

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.0

Description The issue exists in the dissect hip tlv function due to improper handling of a NULL tree, allowing remote attackers to cause a denial of service (infinite loop) via a crafted packet. This can be exploited by sending a specially formed packet.

Recommendations For Wireshark versions 1.12.x through 1.12.0, update to version 1.12.1 or later to resolve the issue. As a temporary workaround, consider disabling the dissect hip tlv function in the HIP dissector until a patch is available.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

ALT-PU-2014-2157

BDU:2015-00783

CESA-2014_1676

CVE-2014-6426

OPENSUSE-SU-2024:10199-1

RHSA-2014:1676

RHSA-2014_1676

Affected Products

Alt Linux

Centos

Red Hat

Wireshark

References · 323

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6429 · Security Note
• https://bdu.fstec.ru/vul/2015-00773 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6421 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6425 · Security Note
• https://bdu.fstec.ru/vul/2015-00768 · Security Note
• https://bdu.fstec.ru/vul/2015-00769 · Security Note
• https://bdu.fstec.ru/vul/2015-00782 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6422 · Security Note
• https://bdu.fstec.ru/vul/2015-00772 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6430 · Security Note
• https://bdu.fstec.ru/vul/2015-00774 · Security Note
• https://bdu.fstec.ru/vul/2015-00767 · Security Note
• https://linux.oracle.com/errata/ELSA-2014-1676.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00783 · Security Note
• https://bdu.fstec.ru/vul/2015-00775 · Security Note