CVE-2014-6427: Buffer Overflow

Published Sep 20, 2014

Updated

Off-by-one error in the isrtsprequestorreply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers parsing of a token located one position beyond the current position.

Affected Software

11 affected components

Wireshark Wireshark=1.10.0

Wireshark Wireshark=1.10.1

Wireshark Wireshark=1.10.2

Wireshark Wireshark=1.10.3

Wireshark Wireshark=1.10.4

Wireshark Wireshark=1.10.5

Wireshark Wireshark=1.10.6

Wireshark Wireshark=1.10.7

Wireshark Wireshark=1.10.8

Wireshark Wireshark=1.10.9

Wireshark Wireshark=1.12.0

Remediation

Patch Available

https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=73959159dbf34b4a0b50fbd19e05cb1b470be9b0

Event History

Sep 20, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6427?

CVE-2014-6427 has a severity rating that may result in a denial of service due to a remote application crash.

How do I fix CVE-2014-6427?

To fix CVE-2014-6427, upgrade your Wireshark version to 1.10.10 or 1.12.1 or later.

Which versions of Wireshark are affected by CVE-2014-6427?

CVE-2014-6427 affects Wireshark versions from 1.10.0 to 1.10.9 and 1.12.0.

What type of attack can exploit CVE-2014-6427?

CVE-2014-6427 can be exploited by remote attackers sending crafted packets to cause a denial of service.

Is CVE-2014-6427 a critical vulnerability?

CVE-2014-6427 is not classified as critical, but it poses a risk of application instability.