Lucene search

K
archlinuxArch LinuxASA-201411-24
HistoryNov 20, 2014 - 12:00 a.m.

wireshark-qt: denial of service

2014-11-2000:00:00
Arch Linux
lists.archlinux.org
19

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

69.0%

  • CVE-2014-8710 (out-of-bounds read)
    Out-of-bounds read flaw in the SigComp dissector (sigcomp-udvm) leads to
    denial of service while processing malformed packets.

  • CVE-2014-8711 (out-of-bounds read)
    The AMQP dissector is seeing a large value in the capture file for what
    it thinks should be a field specifying the number of elements in an
    array, resulting in undetected overflow (wrapping).

  • CVE-2014-8712 (stack buffer overflow)
    An issue in the NCP dissector while constructing strings may lead to
    incorrect data length, resulting in stack buffer overflow and denial of
    service.

  • CVE-2014-8713 (denial of service)
    An issue in the NCP dissector may lead to denial of service while
    accessing an uninitialized buffer.

  • CVE-2014-8714 (denial of service)
    A missing exit when the offset is not incremented in the tn5250
    dissector is leading to an endless loop, resulting in denial of service.

OSVersionArchitecturePackageVersionFilename
anyanyanywireshark-qt< 1.12.2-1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

69.0%