CVE-2014-2281

The nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS dissector in...

4.3 MediumFix available

The nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted NFS packet.

Exploit likelihood

2.94%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2014-2281
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-2281
Updated: 2026-11-02

EUVDEUVD-2014-2319 No score

Record: EUVD-2014-2319
Updated: 2026-11-03

GitHub AdvisoriesGHSA-c3gc-q6xc-6hv4 No score

The nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS dissector in...

Record: GHSA-c3gc-q6xc-6hv4
Weakness: CWE-20
Updated: 2026-11-02

OSV No score

Record: CVE-2014-2281
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-2281 No score

Record: DEBIAN-CVE-2014-2281
Updated: 2026-11-02

Show 7 moreShow less

OSVMGASA-2014-0125 No score

Updated wireshark packages fix multiple vulnerabilies

Updated wireshark packages fix security vulnerabilities:

The NFS dissector could crash (CVE-2014-2281).

The RLC dissector could crash (CVE-2014-2283).

The MPEG file parser could overflow a buffer (CVE-2014-2299).

Record: MGASA-2014-0125
Updated: 2026-11-02

OSVMGASA-2014-0126 No score

Updated wireshark packages fix multiple vulnerabilies

The NFS dissector could crash (CVE-2014-2281).

The M3UA dissector could crash (CVE-2014-2282).

The RLC dissector could crash (CVE-2014-2283).

The MPEG file parser could overflow a buffer (CVE-2014-2299).

Record: MGASA-2014-0126
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10199-1 No score

wireshark-2.2.2-1.1 on GA media

These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10199-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0426-1 No score

Security update for wireshark

wireshark has been updated to version 1.10.11 to fix five security issues.

These security issues have been fixed:

* SigComp UDVM buffer overflow (CVE-2014-8710).
* AMQP dissector crash (CVE-2014-8711).
* NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).
* TN5250 infinite loops (CVE-2014-8714).

This non-security issue has been fixed:

* enable zlib (bnc#899303).

Further bug fixes and updated protocol support as listed in:

https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html

Security Issues:

* CVE-2014-8711
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711>
* CVE-2014-8710
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710>
* CVE-2014-8714
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714>
* CVE-2014-8712
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712>
* CVE-2014-8713
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713>

Record: SUSE-SU-2015:0426-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0653-1 No score

Security update for wireshark

wireshark has been updated to version 1.10.11 to fix five security issues.

These security issues have been fixed:

* SigComp UDVM buffer overflow (CVE-2014-8710).
* AMQP dissector crash (CVE-2014-8711).
* NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).
* TN5250 infinite loops (CVE-2014-8714).

This non-security issue has been fixed:

* enable zlib (bnc#899303).

Further bug fixes and updated protocol support as listed in:

https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html

Security Issues:

* CVE-2014-8711
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711>
* CVE-2014-8710
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710>
* CVE-2014-8714
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714>
* CVE-2014-8712
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712>
* CVE-2014-8713
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713>

Record: SUSE-SU-2015:0653-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1098-1 No score

Security update for wireshark

wireshark has been updated to version 1.10.11 to fix five security issues.

These security issues have been fixed:

* SigComp UDVM buffer overflow (CVE-2014-8710).
* AMQP dissector crash (CVE-2014-8711).
* NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).
* TN5250 infinite loops (CVE-2014-8714).

This non-security issue has been fixed:

* enable zlib (bnc#899303).

Further bug fixes and updated protocol support as listed in:

https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html

Security Issues:

* CVE-2014-8711
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711>
* CVE-2014-8710
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710>
* CVE-2014-8714
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714>
* CVE-2014-8712
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712>
* CVE-2014-8713
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713>

Record: SUSE-SU-2015:1098-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-2281 No score

Record: UBUNTU-CVE-2014-2281
Updated: 2026-11-02

Affected products

wireshark

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Debian:12	before 1.10.6-1	1.10.6-1
`wireshark` Debian:13	before 1.10.6-1	1.10.6-1
`wireshark` Debian:14	before 1.10.6-1	1.10.6-1
`wireshark` Debian:6.0 From an advisory covering 3 CVEs	before 1.2.11-6+squeeze14, plus listed versions 1.2.11-61.2.11-6+squeeze11.2.11-6+squeeze101.2.11-6+squeeze111.2.11-6+squeeze12 Show 8 moreShow less 1.2.11-6+squeeze131.2.11-6+squeeze21.2.11-6+squeeze41.2.11-6+squeeze51.2.11-6+squeeze61.2.11-6+squeeze71.2.11-6+squeeze81.2.11-6+squeeze9	1.2.11-6+squeeze14
`wireshark` Debian:7 From an advisory covering 3 CVEs	before 1.8.2-5wheezy10, plus listed versions 1.8.2-5wheezy21.8.2-5wheezy31.8.2-5wheezy41.8.2-5wheezy51.8.2-5wheezy61.8.2-5wheezy71.8.2-5wheezy81.8.2-5wheezy9	1.8.2-5wheezy10
`wireshark` Mageia:3 From an advisory covering 3 CVEs	before 1.8.13-1.mga3	1.8.13-1.mga3
`wireshark` Mageia:4 From an advisory covering 4 CVEs	before 1.10.6-1.mga4	1.10.6-1.mga4
`wireshark` Red Hat:enterprise_linux:5::client From an advisory covering 22 CVEs	before 0:1.0.15-6.el5_10	0:1.0.15-6.el5_10
`wireshark-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 22 CVEs	before 0:1.0.15-6.el5_10	0:1.0.15-6.el5_10
`wireshark` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 22 CVEs	before 0:1.0.15-6.el5_10	0:1.0.15-6.el5_10

Show 19 moreShow less

Affected packages
Package	Affected	Fixed
`wireshark-debuginfo` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 22 CVEs	before 0:1.0.15-6.el5_10	0:1.0.15-6.el5_10
`wireshark-gnome` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 22 CVEs	before 0:1.0.15-6.el5_10	0:1.0.15-6.el5_10
`wireshark` Red Hat:enterprise_linux:5::server From an advisory covering 22 CVEs	before 0:1.0.15-6.el5_10	0:1.0.15-6.el5_10
`wireshark-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 22 CVEs	before 0:1.0.15-6.el5_10	0:1.0.15-6.el5_10
`wireshark-gnome` Red Hat:enterprise_linux:5::server From an advisory covering 22 CVEs	before 0:1.0.15-6.el5_10	0:1.0.15-6.el5_10
`wireshark` Red Hat:enterprise_linux:6::client From an advisory covering 10 CVEs	before 0:1.8.10-7.el6_5	0:1.8.10-7.el6_5
`wireshark-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 10 CVEs	before 0:1.8.10-7.el6_5	0:1.8.10-7.el6_5
`wireshark-gnome` Red Hat:enterprise_linux:6::client From an advisory covering 10 CVEs	before 0:1.8.10-7.el6_5	0:1.8.10-7.el6_5
`wireshark-devel` Red Hat:enterprise_linux:6::client From an advisory covering 10 CVEs	before 0:1.8.10-7.el6_5	0:1.8.10-7.el6_5
`wireshark` Red Hat:enterprise_linux:6::server From an advisory covering 10 CVEs	before 0:1.8.10-7.el6_5	0:1.8.10-7.el6_5
`wireshark-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 10 CVEs	before 0:1.8.10-7.el6_5	0:1.8.10-7.el6_5
`wireshark-gnome` Red Hat:enterprise_linux:6::server From an advisory covering 10 CVEs	before 0:1.8.10-7.el6_5	0:1.8.10-7.el6_5
`wireshark-devel` Red Hat:enterprise_linux:6::server From an advisory covering 10 CVEs	before 0:1.8.10-7.el6_5	0:1.8.10-7.el6_5
`wireshark` Red Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs	before 0:1.8.10-7.el6_5	0:1.8.10-7.el6_5
`wireshark-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs	before 0:1.8.10-7.el6_5	0:1.8.10-7.el6_5
`wireshark-gnome` Red Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs	before 0:1.8.10-7.el6_5	0:1.8.10-7.el6_5
`wireshark-devel` Red Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs	before 0:1.8.10-7.el6_5	0:1.8.10-7.el6_5
`wireshark` Ubuntu:14.04:LTS	before 1.10.6-1, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-2	1.10.6-1
`wireshark` openSUSE:Tumbleweed From an advisory covering 262 CVEs	before 2.2.2-1.1	2.2.2-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-2281 is a medium vulnerability (CVSS 4.3) in Wireshark, published March 8, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.94%, the 87th percentile. Fixed in wireshark 1.10.6-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 260 references. The JSON record has them.