CVE

Id
73721  
CVE No.
CVE-2014-6421  
Status
Candidate  
Description
Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors.  
Phase
Assigned (20140916)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
689942 73721 CVE-2014-6421 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2014-12.html  View
689943 73721 CVE-2014-6421 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9920  View
689944 73721 CVE-2014-6421 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=04c05a21e34cec326f1aff2f5f8a6e74e1ced984  View
689945 73721 CVE-2014-6421 CONFIRM:http://linux.oracle.com/errata/ELSA-2014-1676  View
689946 73721 CVE-2014-6421 CONFIRM:http://linux.oracle.com/errata/ELSA-2014-1677  View
689947 73721 CVE-2014-6421 REDHAT:RHSA-2014:1676  View
689948 73721 CVE-2014-6421 URL:http://rhn.redhat.com/errata/RHSA-2014-1676.html  View
689949 73721 CVE-2014-6421 REDHAT:RHSA-2014:1677  View
689950 73721 CVE-2014-6421 URL:http://rhn.redhat.com/errata/RHSA-2014-1677.html  View
689951 73721 CVE-2014-6421 SUSE:SUSE-SU-2014:1221  View
689952 73721 CVE-2014-6421 URL:http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html  View
689953 73721 CVE-2014-6421 SUSE:openSUSE-SU-2014:1249  View
689954 73721 CVE-2014-6421 URL:http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html  View
689955 73721 CVE-2014-6421 SECUNIA:60280  View
689956 73721 CVE-2014-6421 URL:http://secunia.com/advisories/60280  View
689957 73721 CVE-2014-6421 SECUNIA:61929  View
689958 73721 CVE-2014-6421 URL:http://secunia.com/advisories/61929  View
689959 73721 CVE-2014-6421 SECUNIA:61933  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15507 JVNDB-2014-004382 Wireshark の DOS Sniffer ファイルパーサの wiretap/ngsniffer.c におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の DOS Sniffer ファイルパーサの wiretap/ngsniffer.c の SnifferDecompress 関数は、空の入力データを適切に処理しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-6429 73721 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004382.html  View