CVE

Id
73727  
CVE No.
CVE-2014-6427  
Status
Candidate  
Description
Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers parsing of a token located one position beyond the current position.  
Phase
Assigned (20140916)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
690043 73727 CVE-2014-6427 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2014-17.html  View
690044 73727 CVE-2014-6427 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10381  View
690045 73727 CVE-2014-6427 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=73959159dbf34b4a0b50fbd19e05cb1b470be9b0  View
690046 73727 CVE-2014-6427 CONFIRM:http://linux.oracle.com/errata/ELSA-2014-1676  View
690047 73727 CVE-2014-6427 DEBIAN:DSA-3049  View
690048 73727 CVE-2014-6427 URL:http://www.debian.org/security/2014/dsa-3049  View
690049 73727 CVE-2014-6427 REDHAT:RHSA-2014:1676  View
690050 73727 CVE-2014-6427 URL:http://rhn.redhat.com/errata/RHSA-2014-1676.html  View
690051 73727 CVE-2014-6427 SUSE:SUSE-SU-2014:1221  View
690052 73727 CVE-2014-6427 URL:http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html  View
690053 73727 CVE-2014-6427 SUSE:openSUSE-SU-2014:1249  View
690054 73727 CVE-2014-6427 URL:http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html  View
690055 73727 CVE-2014-6427 SECUNIA:60578  View
690056 73727 CVE-2014-6427 URL:http://secunia.com/advisories/60578  View
690057 73727 CVE-2014-6427 SECUNIA:60280  View
690058 73727 CVE-2014-6427 URL:http://secunia.com/advisories/60280  View
690059 73727 CVE-2014-6427 SECUNIA:61929  View

Related JVN