CVE

Id
73726  
CVE No.
CVE-2014-6426  
Status
Candidate  
Description
The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12.x before 1.12.1 does not properly handle a NULL tree, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.  
Phase
Assigned (20140916)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
690035 73726 CVE-2014-6426 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2014-16.html  View
690036 73726 CVE-2014-6426 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=d9e5021fe79973d00ddd8fcef0bbefbaae63dd0f  View
690037 73726 CVE-2014-6426 CONFIRM:http://linux.oracle.com/errata/ELSA-2014-1676  View
690038 73726 CVE-2014-6426 REDHAT:RHSA-2014:1676  View
690039 73726 CVE-2014-6426 URL:http://rhn.redhat.com/errata/RHSA-2014-1676.html  View
690040 73726 CVE-2014-6426 SECUNIA:60280  View
690041 73726 CVE-2014-6426 URL:http://secunia.com/advisories/60280  View
690042 73726 CVE-2014-6426 SECUNIA:61929  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15727 JVNDB-2014-004602 GoPro HERO 3+ の gpExec における任意のコマンドを実行される脆弱性 GoPro HERO 3+ の gpExec には、任意のコマンドを実行される脆弱性が存在します。 CVE-2014-6434 73726 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004602.html  View