{"id":"CVE-2014-4174","aliases":["DEBIAN-CVE-2014-4174","EUVD-2014-4104","GHSA-mvm8-xfgh-xjqv","UBUNTU-CVE-2014-4174"],"status":"published","title":"wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote...","description":"wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05933,"percentile":0.93308,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2014-06-18T16:00:00Z","modified":"2026-10-23T15:47:27Z","fixes":[{"ecosystem":"Debian:12","package":"wireshark","fixed_in":["1.10.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["1.10.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["1.10.4-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-1"}]}]}],"products":[{"vendor":"wireshark","product":"wireshark"}],"references":[{"url":"http://anonsvn.wireshark.org/viewvc?view=revision\u0026revision=53123","tags":["x_refsource_CONFIRM","x_transferred","web","report"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8808","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9753","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence","report"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2014-05.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://anonsvn.wireshark.org/viewvc/trunk-1.10/wiretap/libpcap.c?r1=53123\u0026r2=53122\u0026pathrev=53123","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix","report"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9390","tags":["x_refsource_MISC","x_transferred","Exploit","evidence","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4174"},{"url":"https://github.com/advisories/GHSA-mvm8-xfgh-xjqv"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-4174","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-4174","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4174","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-4174","description":"wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet.","status":"published","published":"2014-06-18T16:00:00Z","modified":"2024-08-06T11:04:29.012Z","updated_at":"2026-11-02T14:33:45.263043Z"}],"euvd":[{"id":"EUVD-2014-4104","description":"wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet.","status":"published","published":"2014-06-18T16:00:00Z","modified":"2024-08-06T11:04:29Z","updated_at":"2026-11-03T01:57:07.897691Z"}],"ghsa":[{"id":"GHSA-mvm8-xfgh-xjqv","title":"wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote...","description":"wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet.","status":"published","published":"2022-05-17T04:41:49Z","modified":"2023-01-28T05:02:19Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:45.385Z"}],"nvd":[{"id":"CVE-2014-4174","description":"wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet.","status":"published","published":"2014-06-18T16:55:08.36Z","modified":"2026-06-17T00:09:32.847Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:54.464139Z"}],"osv":[{"id":"CVE-2014-4174","description":"wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet.","status":"published","published":"2014-06-18T16:55:08Z","modified":"2026-04-10T03:43:53.003687Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-4174","description":"wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet.","status":"published","published":"2014-06-18T16:55:08.36Z","modified":"2026-10-23T15:47:27.799476602Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"UBUNTU-CVE-2014-4174","description":"wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet.","status":"withdrawn","published":"2014-06-18T16:55:00Z","modified":"2025-07-16T08:11:05.652518Z","updated_at":"2026-11-02T15:54:09.010095Z"}]}}