CVE-2014-6424: Buffer Overflow

Published Sep 20, 2014

Updated

The dissectv9v10pdudata function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 refers to incorrect offset and start variables, which allows remote attackers to cause a denial of service (uninitialized memory read and application crash) via a crafted packet.

Affected Software

11 affected components

Wireshark Wireshark=1.10.0

Wireshark Wireshark=1.10.1

Wireshark Wireshark=1.10.2

Wireshark Wireshark=1.10.3

Wireshark Wireshark=1.10.4

Wireshark Wireshark=1.10.5

Wireshark Wireshark=1.10.6

Wireshark Wireshark=1.10.7

Wireshark Wireshark=1.10.8

Wireshark Wireshark=1.10.9

Wireshark Wireshark=1.12.0

Remediation

Patch Available

https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=44698259b1f5865c60323acaf2a633654a2abe81

Event History

Sep 20, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6424?

CVE-2014-6424 has a severity rating that may lead to denial of service due to uninitialized memory reads.

How do I fix CVE-2014-6424?

To fix CVE-2014-6424, upgrade Wireshark to version 1.10.10 or 1.12.1 or later.

Which versions of Wireshark are affected by CVE-2014-6424?

CVE-2014-6424 affects Wireshark versions 1.10.0 to 1.10.9 and 1.12.0.

What type of vulnerability is CVE-2014-6424?

CVE-2014-6424 is a vulnerability that allows remote attackers to cause denial of service.

Can CVE-2014-6424 allow remote code execution?

No, CVE-2014-6424 primarily causes denial of service but does not allow remote code execution.