CVE-2014-4174

wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
wiresharkwireshark
1.10.0
wiresharkwireshark
1.10.1
wiresharkwireshark
1.10.2
wiresharkwireshark
1.10.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
wireshark
bullseye
3.4.10-0+deb11u1
fixed
squeeze
not-affected
wheezy
not-affected
bullseye (security)
3.4.16-0+deb11u1
fixed
bookworm
4.0.11-1~deb12u1
fixed
bookworm (security)
4.0.11-1~deb12u1
fixed
trixie
4.4.0-1
fixed
sid
4.4.1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wireshark
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
vivid
not-affected
utopic
not-affected
trusty
not-affected
saucy
ignored
precise
ignored
lucid
ignored
Common Weakness Enumeration
References
http://anonsvn.wireshark.org/viewvc/trunk-1.10/wiretap/libpcap.c?r1=53123&r2=53122&pathrev=53123
http://anonsvn.wireshark.org/viewvc?view=revision&revision=53123
http://www.wireshark.org/security/wnpa-sec-2014-05.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8808
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9390
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9753
http://anonsvn.wireshark.org/viewvc/trunk-1.10/wiretap/libpcap.c?r1=53123&r2=53122&pathrev=53123
http://anonsvn.wireshark.org/viewvc?view=revision&revision=53123
http://www.wireshark.org/security/wnpa-sec-2014-05.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8808
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9390
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9753