CVE-2014-2281

EUVD-2014-2319
The nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted NFS packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
Affected Products (NVD)
VendorProductVersion
wiresharkwireshark
1.8.0
wiresharkwireshark
1.8.1
wiresharkwireshark
1.8.2
wiresharkwireshark
1.8.3
wiresharkwireshark
1.8.4
wiresharkwireshark
1.8.5
wiresharkwireshark
1.8.6
wiresharkwireshark
1.8.7
wiresharkwireshark
1.8.8
wiresharkwireshark
1.8.9
wiresharkwireshark
1.8.10
wiresharkwireshark
1.8.11
wiresharkwireshark
1.8.12
wiresharkwireshark
1.10.0
wiresharkwireshark
1.10.1
wiresharkwireshark
1.10.2
wiresharkwireshark
1.10.3
wiresharkwireshark
1.10.4
wiresharkwireshark
1.10.5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
wireshark
bookworm
4.0.11-1~deb12u1
fixed
bookworm (security)
4.0.11-1~deb12u1
fixed
bullseye
3.4.10-0+deb11u1
fixed
bullseye (security)
3.4.16-0+deb11u1
fixed
sid
4.4.1-1
fixed
squeeze
not-affected
trixie
4.4.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wireshark
lucid
ignored
precise
ignored
quantal
ignored
saucy
ignored
trusty
Fixed 1.10.6-1
released
utopic
Fixed 1.10.6-1
released
vivid
Fixed 1.10.6-1
released
wily
Fixed 1.10.6-1
released
xenial
Fixed 1.10.6-1
released
yakkety
Fixed 1.10.6-1
released
zesty
Fixed 1.10.6-1
released
Common Weakness Enumeration
References
http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-nfs.c?r1=54875&r2=54874&pathrev=54875
http://anonsvn.wireshark.org/viewvc?view=revision&revision=54875
http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html
http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html
http://rhn.redhat.com/errata/RHSA-2014-0341.html
http://rhn.redhat.com/errata/RHSA-2014-0342.html
http://secunia.com/advisories/57480
http://secunia.com/advisories/57489
http://www.debian.org/security/2014/dsa-2871
http://www.securitytracker.com/id/1029907
http://www.wireshark.org/security/wnpa-sec-2014-01.html
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark10
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9672
http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-nfs.c?r1=54875&r2=54874&pathrev=54875
http://anonsvn.wireshark.org/viewvc?view=revision&revision=54875
http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html
http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html
http://rhn.redhat.com/errata/RHSA-2014-0341.html
http://rhn.redhat.com/errata/RHSA-2014-0342.html
http://secunia.com/advisories/57480
http://secunia.com/advisories/57489
http://www.debian.org/security/2014/dsa-2871
http://www.securitytracker.com/id/1029907
http://www.wireshark.org/security/wnpa-sec-2014-01.html
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark10
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9672