CVE-2014-5161: Buffer Overflow
The dissectlog function in plugins/irda/packet-irda.c in the IrDA dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5161?
CVE-2014-5161 has a severity rating of moderate due to its potential to cause denial of service through application crashes.
How do I fix CVE-2014-5161?
To fix CVE-2014-5161, upgrade Wireshark to version 1.10.9 or later which includes a patch for this vulnerability.
Which versions of Wireshark are affected by CVE-2014-5161?
CVE-2014-5161 affects Wireshark versions 1.10.0 through 1.10.8.
What kind of attack does CVE-2014-5161 allow?
CVE-2014-5161 allows remote attackers to execute a denial of service attack through crafted IrDA packets.
Is CVE-2014-5161 exploit easy to execute?
Yes, exploiting CVE-2014-5161 requires sending a specially crafted packet, which may be achievable by an attacker on the same network.