CVE-2014-6428: Buffer Overflow

Published Sep 20, 2014

Updated

The dissectspdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not initialize a certain ID value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Affected Software

11 affected components

Wireshark Wireshark=1.10.0

Wireshark Wireshark=1.10.1

Wireshark Wireshark=1.10.2

Wireshark Wireshark=1.10.3

Wireshark Wireshark=1.10.4

Wireshark Wireshark=1.10.5

Wireshark Wireshark=1.10.6

Wireshark Wireshark=1.10.7

Wireshark Wireshark=1.10.8

Wireshark Wireshark=1.10.9

Wireshark Wireshark=1.12.0

Remediation

Patch Available

https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=433a444d148f86f2562f804d25a57d00dc277cc0

Event History

Sep 20, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6428?

CVE-2014-6428 has a severity rating that can lead to a denial of service through application crashes.

How do I fix CVE-2014-6428?

To fix CVE-2014-6428, upgrade to Wireshark versions 1.10.10 or 1.12.1 or later.

Which versions of Wireshark are affected by CVE-2014-6428?

CVE-2014-6428 affects Wireshark versions 1.10.0 through 1.10.9 and 1.12.0.

What are the implications of CVE-2014-6428 for network security?

The implications of CVE-2014-6428 include potential service outages due to application crashes when processing crafted packets.

Are there any workarounds for CVE-2014-6428?

There are no official workarounds, so upgrading to a patched version is the recommended solution for CVE-2014-6428.