{"id":"CVE-2014-6421","aliases":["DEBIAN-CVE-2014-6421","EUVD-2014-6301","GHSA-r6wm-v578-w5jm","MGASA-2014-0386","RHSA-2014:1676","RHSA-2014:1677","SUSE-SU-2015:0426-1","SUSE-SU-2015:0653-1","SUSE-SU-2015:1098-1","UBUNTU-CVE-2014-6421"],"status":"published","title":"Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows...","description":"Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02908,"percentile":0.87076,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-09-20T10:00:00Z","modified":"2026-10-23T15:47:36Z","fixes":[{"ecosystem":"Debian:12","package":"wireshark","fixed_in":["1.12.0~rc1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["1.12.0~rc1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["1.12.0~rc1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"wireshark","fixed_in":["2.6.3-1~ubuntu14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"wireshark","fixed_in":["2.6.3-1~ubuntu16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"wireshark","fixed_in":["2.6.3-1~ubuntu18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0~rc1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0~rc1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0~rc1-1"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.10-1.mga3"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.10-1.mga4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1~ubuntu14.04.1"}]}],"versions":["1.10.2-1","1.10.3-1","1.10.5-1ubuntu1","1.10.5-2","1.10.6-1","1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1~ubuntu16.04.1"}]}],"versions":["1.12.7+g7fc8978-1","1.12.8+g5b6e543-2","2.0.1+g59ea380-3build1","2.0.2+ga16e22e-1","2.2.6+g32dac6a-2ubuntu0.16.04"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1~ubuntu18.04.1"}]}],"versions":["2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1"]}],"products":[{"vendor":"wireshark","product":"wireshark"}],"references":[{"url":"http://linux.oracle.com/errata/ELSA-2014-1676","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/61933","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1677.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1676.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9920","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=04c05a21e34cec326f1aff2f5f8a6e74e1ced984","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/60280","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-1677","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2014-12.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/61929","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6421","tags":["advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=04c05a21e34cec326f1aff2f5f8a6e74e1ced984"},{"url":"https://github.com/advisories/GHSA-r6wm-v578-w5jm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-6421","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0386.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14113","tags":["report"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-12.html","tags":["web","article","report"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-13.html","tags":["web","article"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-14.html","tags":["web","article"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-17.html","tags":["web","article"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-18.html","tags":["web","article"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-19.html","tags":["web","article"]},{"url":"https://www.wireshark.org/docs/relnotes/wireshark-1.10.10.html","tags":["web"]},{"url":"https://www.wireshark.org/news/20140916.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1676","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142611","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1676.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6421","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6421","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6422","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6423","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6423","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6423","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6424","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6424","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6424","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6425","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6425","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6425","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-15.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6426","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6426","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6426","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-16.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6427","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6427","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6427","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6428","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6428","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6428","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6429","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6429","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6429","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6430","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6430","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6430","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6431","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6431","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6432","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6432","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6432","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1677","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1677.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150426-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/813217","tags":["report"]},{"url":"https://bugzilla.suse.com/816517","tags":["report"]},{"url":"https://bugzilla.suse.com/816887","tags":["report"]},{"url":"https://bugzilla.suse.com/820973","tags":["report"]},{"url":"https://bugzilla.suse.com/824900","tags":["report"]},{"url":"https://bugzilla.suse.com/831718","tags":["report"]},{"url":"https://bugzilla.suse.com/839607","tags":["report"]},{"url":"https://bugzilla.suse.com/848738","tags":["report"]},{"url":"https://bugzilla.suse.com/855980","tags":["report"]},{"url":"https://bugzilla.suse.com/856495","tags":["report"]},{"url":"https://bugzilla.suse.com/856496","tags":["report"]},{"url":"https://bugzilla.suse.com/856498","tags":["report"]},{"url":"https://bugzilla.suse.com/867485","tags":["report"]},{"url":"https://bugzilla.suse.com/889854","tags":["report"]},{"url":"https://bugzilla.suse.com/889899","tags":["report"]},{"url":"https://bugzilla.suse.com/889900","tags":["report"]},{"url":"https://bugzilla.suse.com/889901","tags":["report"]},{"url":"https://bugzilla.suse.com/889906","tags":["report"]},{"url":"https://bugzilla.suse.com/897055","tags":["report"]},{"url":"https://bugzilla.suse.com/899303","tags":["report"]},{"url":"https://bugzilla.suse.com/905245","tags":["report"]},{"url":"https://bugzilla.suse.com/905246","tags":["report"]},{"url":"https://bugzilla.suse.com/905247","tags":["report"]},{"url":"https://bugzilla.suse.com/905248","tags":["report"]},{"url":"https://bugzilla.suse.com/912365","tags":["report"]},{"url":"https://bugzilla.suse.com/912368","tags":["report"]},{"url":"https://bugzilla.suse.com/912369","tags":["report"]},{"url":"https://bugzilla.suse.com/912370","tags":["report"]},{"url":"https://bugzilla.suse.com/912372","tags":["report"]},{"url":"https://bugzilla.suse.com/920696","tags":["report"]},{"url":"https://bugzilla.suse.com/920697","tags":["report"]},{"url":"https://bugzilla.suse.com/920699","tags":["report"]},{"url":"https://bugzilla.suse.com/930691","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3814","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150653-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151098-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-6421","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-6421","description":"Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors.","status":"published","published":"2014-09-20T10:00:00Z","modified":"2024-08-06T12:17:23.735Z","updated_at":"2026-11-02T14:33:45.263043Z"}],"euvd":[{"id":"EUVD-2014-6301","description":"Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors.","status":"published","published":"2014-09-20T10:00:00Z","modified":"2024-08-06T12:17:23Z","updated_at":"2026-11-03T01:56:59.500212Z"}],"ghsa":[{"id":"GHSA-r6wm-v578-w5jm","title":"Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows...","description":"Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors.","status":"published","published":"2022-05-17T04:30:15Z","modified":"2025-04-12T12:39:27Z","updated_at":"2026-11-02T15:01:18.899916Z"}],"nvd":[{"id":"CVE-2014-6421","description":"Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors.","status":"published","published":"2014-09-20T10:55:06.137Z","modified":"2026-06-17T00:13:02.837Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:55.884979Z"}],"osv":[{"id":"CVE-2014-6421","description":"Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors.","status":"published","published":"2014-09-20T10:55:06Z","modified":"2026-04-16T06:21:06.071652556Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-6421","description":"Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors.","status":"published","published":"2014-09-20T10:55:06.137Z","modified":"2026-10-23T15:47:36.475340328Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"MGASA-2014-0386","title":"Updated wireshark packages fix security vulnerabilities","description":"Updated wireshark packages fix security vulnerabilities:\n\nRTP dissector crash (CVE-2014-6421, CVE-2014-6422).\n\nMEGACO dissector infinite loop (CVE-2014-6423).\n\nNetflow dissector crash (CVE-2014-6424).\n\nRTSP dissector crash (CVE-2014-6427).\n\nSES dissector crash (CVE-2014-6428).\n\nSniffer file parser crash (CVE-2014-6429, CVE-2014-6430, CVE-2014-6431,\nCVE-2014-6432).\n","status":"published","published":"2014-09-24T16:44:28Z","modified":"2026-04-16T06:25:33.352871077Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"RHSA-2014:1676","title":"Red Hat Security Advisory: wireshark security update","status":"published","published":"2024-09-15T22:05:31Z","modified":"2026-06-28T10:11:50Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1677","title":"Red Hat Security Advisory: wireshark security update","status":"published","published":"2024-09-15T22:05:37Z","modified":"2026-06-28T10:11:51Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2015:0426-1","title":"Security update for wireshark","description":"\nwireshark has been updated to version 1.10.11 to fix five security issues.\n\nThese security issues have been fixed:\n\n    * SigComp UDVM buffer overflow (CVE-2014-8710).\n    * AMQP dissector crash (CVE-2014-8711).\n    * NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).\n    * TN5250 infinite loops (CVE-2014-8714).\n\nThis non-security issue has been fixed:\n\n    * enable zlib (bnc#899303).\n\nFurther bug fixes and updated protocol support as listed in:\n\nhttps://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html\n\u003chttps://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-8711\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711\u003e\n    * CVE-2014-8710\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710\u003e\n    * CVE-2014-8714\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714\u003e\n    * CVE-2014-8712\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712\u003e\n    * CVE-2014-8713\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713\u003e\n\n","status":"published","published":"2014-11-14T12:53:20Z","modified":"2026-02-04T03:00:53.770544Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0653-1","title":"Security update for wireshark","description":"\nwireshark has been updated to version 1.10.11 to fix five security issues.\n\nThese security issues have been fixed:\n\n    * SigComp UDVM buffer overflow (CVE-2014-8710).\n    * AMQP dissector crash (CVE-2014-8711).\n    * NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).\n    * TN5250 infinite loops (CVE-2014-8714).\n\nThis non-security issue has been fixed:\n\n    * enable zlib (bnc#899303).\n\nFurther bug fixes and updated protocol support as listed in:\n\nhttps://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html\n\u003chttps://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-8711\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711\u003e\n    * CVE-2014-8710\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710\u003e\n    * CVE-2014-8714\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714\u003e\n    * CVE-2014-8712\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712\u003e\n    * CVE-2014-8713\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713\u003e\n\n","status":"published","published":"2014-11-14T12:53:20Z","modified":"2026-02-04T02:27:21.885122Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1098-1","title":"Security update for wireshark","description":"\nwireshark has been updated to version 1.10.11 to fix five security issues.\n\nThese security issues have been fixed:\n\n    * SigComp UDVM buffer overflow (CVE-2014-8710).\n    * AMQP dissector crash (CVE-2014-8711).\n    * NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).\n    * TN5250 infinite loops (CVE-2014-8714).\n\nThis non-security issue has been fixed:\n\n    * enable zlib (bnc#899303).\n\nFurther bug fixes and updated protocol support as listed in:\n\nhttps://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html\n\u003chttps://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-8711\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711\u003e\n    * CVE-2014-8710\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710\u003e\n    * CVE-2014-8714\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714\u003e\n    * CVE-2014-8712\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712\u003e\n    * CVE-2014-8713\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713\u003e\n\n","status":"published","published":"2014-11-14T12:53:20Z","modified":"2026-02-04T02:21:41.735286Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2014-6421","description":"Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors.","status":"published","published":"2014-09-20T10:55:00Z","modified":"2026-04-22T09:47:28.995456Z","updated_at":"2026-11-02T15:54:09.378953Z"}]}}