CVE

Id
73731  
CVE No.
CVE-2014-6431  
Status
Candidate  
Description
Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (application crash) via a crafted file that triggers writes of uncompressed bytes beyond the end of the output buffer.  
Phase
Assigned (20140916)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
690126 73731 CVE-2014-6431 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2014-19.html  View
690127 73731 CVE-2014-6431 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10461  View
690128 73731 CVE-2014-6431 CONFIRM:https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=47c592938ba9f0caeacc4c2ccadb370e72f293a2  View
690129 73731 CVE-2014-6431 CONFIRM:http://linux.oracle.com/errata/ELSA-2014-1676  View
690130 73731 CVE-2014-6431 CONFIRM:http://linux.oracle.com/errata/ELSA-2014-1677  View
690131 73731 CVE-2014-6431 DEBIAN:DSA-3049  View
690132 73731 CVE-2014-6431 URL:http://www.debian.org/security/2014/dsa-3049  View
690133 73731 CVE-2014-6431 REDHAT:RHSA-2014:1676  View
690134 73731 CVE-2014-6431 URL:http://rhn.redhat.com/errata/RHSA-2014-1676.html  View
690135 73731 CVE-2014-6431 REDHAT:RHSA-2014:1677  View
690136 73731 CVE-2014-6431 URL:http://rhn.redhat.com/errata/RHSA-2014-1677.html  View
690137 73731 CVE-2014-6431 SUSE:SUSE-SU-2014:1221  View
690138 73731 CVE-2014-6431 URL:http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html  View
690139 73731 CVE-2014-6431 SUSE:openSUSE-SU-2014:1249  View
690140 73731 CVE-2014-6431 URL:http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html  View
690141 73731 CVE-2014-6431 SECUNIA:60578  View
690142 73731 CVE-2014-6431 URL:http://secunia.com/advisories/60578  View
690143 73731 CVE-2014-6431 SECUNIA:60280  View
690144 73731 CVE-2014-6431 URL:http://secunia.com/advisories/60280  View
690145 73731 CVE-2014-6431 SECUNIA:61929  View
690146 73731 CVE-2014-6431 URL:http://secunia.com/advisories/61929  View
690147 73731 CVE-2014-6431 SECUNIA:61933  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15760 JVNDB-2014-004635 Elasticsearch の CORS 機能におけるクロスサイトスクリプティングの脆弱性 Elasticsearch の CORS 機能には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-6439 73731 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004635.html  View