NVD

Id
32916  
Name
CVE-2014-5163  
Description
The APN decode functionality in (1) epan/dissectors/packet-gtp.c and (2) epan/dissectors/packet-gsm_a_gm.c in the GTP and GSM Management dissectors in Wireshark 1.10.x before 1.10.9 does not completely initialize a certain buffer, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-08-01  
Modified Date
2017-01-06  
Seq
2014-5163  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172855 32916 CVE-2014-5163 SUSE-SU-2014:1221  View
172856 32916 CVE-2014-5163 openSUSE-SU-2014:1038  View
172857 32916 CVE-2014-5163 openSUSE-SU-2014:1249  View
172858 32916 CVE-2014-5163 57593  View
172859 32916 CVE-2014-5163 DSA-3002  View
172860 32916 CVE-2014-5163 http://www.wireshark.org/security/wnpa-sec-2014-09.html  View
172861 32916 CVE-2014-5163 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10216  View
172862 32916 CVE-2014-5163 https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3fc441e7a5008640c68ec985e669d5092414a519  View
172863 32916 CVE-2014-5163 https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=dd7134d907350ccc574cdec596f4162860912bb9  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14787 JVNDB-2014-003662 Wireshark の GTP および GSM Management 解析機能におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の GTP および GSM Management 解析機能の (1) epan/dissectors/packet-gtp.c および (2) epan/dissectors/packet-gsm_a_gm.c 内の APN デコード機能は、特定のバッファを完全に初期化しないため、サービス運用妨害 (アプリケーションクラシュ) 状態にされる脆弱性が存在します。 CVE-2014-5163 72452 CVE-2014-5163 32916 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003662.html 2014-07-31 2014-10-06 View