{"id":"CVE-2014-6422","aliases":["DEBIAN-CVE-2014-6422","DLA-198-1","DSA-3049-1","EUVD-2014-6302","GHSA-vf77-5656-m39r","MGASA-2014-0386","RHSA-2014:1676","RHSA-2014:1677","SUSE-SU-2015:0426-1","SUSE-SU-2015:0653-1","SUSE-SU-2015:1098-1","UBUNTU-CVE-2014-6422"],"status":"published","title":"The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media...","description":"The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissector.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03163,"percentile":0.88082,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2014-09-20T10:00:00Z","modified":"2026-10-23T15:47:26Z","fixes":[{"ecosystem":"Debian:12","package":"wireshark","fixed_in":["1.12.0+git+4fab41a1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["1.12.0+git+4fab41a1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["1.12.0+git+4fab41a1-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0+git+4fab41a1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0+git+4fab41a1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0+git+4fab41a1-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-5wheezy15~deb6u1"}]}],"versions":["1.2.11-6","1.2.11-6+squeeze1","1.2.11-6+squeeze10","1.2.11-6+squeeze11","1.2.11-6+squeeze12","1.2.11-6+squeeze13","1.2.11-6+squeeze14","1.2.11-6+squeeze15","1.2.11-6+squeeze2","1.2.11-6+squeeze4","1.2.11-6+squeeze5","1.2.11-6+squeeze6","1.2.11-6+squeeze7","1.2.11-6+squeeze8","1.2.11-6+squeeze9","1.4.0-1","1.4.0~rc2-1","1.4.0~rc2-2","1.4.1-1","1.4.2-1","1.4.2-2","1.4.2-3","1.4.3-1","1.4.3-2","1.4.3-3","1.4.4-1","1.4.5-1","1.4.6-1","1.5.0-1","1.5.1-1","1.6.0-1","1.6.0-2","1.6.1-1","1.6.2-1","1.6.3-1","1.6.4-1","1.6.5-1","1.6.5-2","1.6.6-1","1.6.7-1","1.6.8-1","1.8.0-1","1.8.0~rc1-1","1.8.2-1","1.8.2-2","1.8.2-5","1.8.2-5wheezy1","1.8.2-5wheezy10","1.8.2-5wheezy11","1.8.2-5wheezy12","1.8.2-5wheezy13","1.8.2-5wheezy14","1.8.2-5wheezy2","1.8.2-5wheezy3","1.8.2-5wheezy4","1.8.2-5wheezy5","1.8.2-5wheezy6","1.8.2-5wheezy7","1.8.2-5wheezy8","1.8.2-5wheezy9"],"bundled":17},{"source":"osv","ecosystem":"Debian:7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-5wheezy12"}]}],"versions":["1.8.2-5wheezy10","1.8.2-5wheezy11","1.8.2-5wheezy2","1.8.2-5wheezy3","1.8.2-5wheezy4","1.8.2-5wheezy5","1.8.2-5wheezy6","1.8.2-5wheezy7","1.8.2-5wheezy8","1.8.2-5wheezy9"],"bundled":9},{"source":"osv","ecosystem":"Mageia:3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.10-1.mga3"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.10-1.mga4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.10-8.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-12.el7_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"wireshark-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-7.el5_11"}]}],"bundled":9}],"products":[{"vendor":"wireshark","product":"wireshark"}],"references":[{"url":"http://linux.oracle.com/errata/ELSA-2014-1676","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/61933","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00058.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1677.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1676.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9920","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.debian.org/security/2014/dsa-3049","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00033.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=04c05a21e34cec326f1aff2f5f8a6e74e1ced984","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/60280","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/60578","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-1677","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2014-12.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/61929","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6422","tags":["advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=04c05a21e34cec326f1aff2f5f8a6e74e1ced984"},{"url":"https://github.com/advisories/GHSA-vf77-5656-m39r"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-6422","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0386.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14113","tags":["report"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-12.html","tags":["web","article","report"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-13.html","tags":["web","article"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-14.html","tags":["web","article"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-17.html","tags":["web","article"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-18.html","tags":["web","article"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-19.html","tags":["web","article"]},{"url":"https://www.wireshark.org/docs/relnotes/wireshark-1.10.10.html","tags":["web"]},{"url":"https://www.wireshark.org/news/20140916.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1676","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142611","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1676.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6421","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6421","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6422","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6423","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6423","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6423","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6424","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6424","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6424","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6425","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6425","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6425","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-15.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6426","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6426","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6426","tags":["advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2014-16.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6427","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6427","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6427","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6428","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6428","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6428","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6429","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6429","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6429","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6430","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6430","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6430","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6431","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6431","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6432","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6432","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6432","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1677","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1677.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150426-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/813217","tags":["report"]},{"url":"https://bugzilla.suse.com/816517","tags":["report"]},{"url":"https://bugzilla.suse.com/816887","tags":["report"]},{"url":"https://bugzilla.suse.com/820973","tags":["report"]},{"url":"https://bugzilla.suse.com/824900","tags":["report"]},{"url":"https://bugzilla.suse.com/831718","tags":["report"]},{"url":"https://bugzilla.suse.com/839607","tags":["report"]},{"url":"https://bugzilla.suse.com/848738","tags":["report"]},{"url":"https://bugzilla.suse.com/855980","tags":["report"]},{"url":"https://bugzilla.suse.com/856495","tags":["report"]},{"url":"https://bugzilla.suse.com/856496","tags":["report"]},{"url":"https://bugzilla.suse.com/856498","tags":["report"]},{"url":"https://bugzilla.suse.com/867485","tags":["report"]},{"url":"https://bugzilla.suse.com/889854","tags":["report"]},{"url":"https://bugzilla.suse.com/889899","tags":["report"]},{"url":"https://bugzilla.suse.com/889900","tags":["report"]},{"url":"https://bugzilla.suse.com/889901","tags":["report"]},{"url":"https://bugzilla.suse.com/889906","tags":["report"]},{"url":"https://bugzilla.suse.com/897055","tags":["report"]},{"url":"https://bugzilla.suse.com/899303","tags":["report"]},{"url":"https://bugzilla.suse.com/905245","tags":["report"]},{"url":"https://bugzilla.suse.com/905246","tags":["report"]},{"url":"https://bugzilla.suse.com/905247","tags":["report"]},{"url":"https://bugzilla.suse.com/905248","tags":["report"]},{"url":"https://bugzilla.suse.com/912365","tags":["report"]},{"url":"https://bugzilla.suse.com/912368","tags":["report"]},{"url":"https://bugzilla.suse.com/912369","tags":["report"]},{"url":"https://bugzilla.suse.com/912370","tags":["report"]},{"url":"https://bugzilla.suse.com/912372","tags":["report"]},{"url":"https://bugzilla.suse.com/920696","tags":["report"]},{"url":"https://bugzilla.suse.com/920697","tags":["report"]},{"url":"https://bugzilla.suse.com/920699","tags":["report"]},{"url":"https://bugzilla.suse.com/930691","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3814","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150653-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151098-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-6422","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-6422","description":"The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissector.","status":"published","published":"2014-09-20T10:00:00Z","modified":"2024-08-06T12:17:23.887Z","updated_at":"2026-11-02T14:33:45.263043Z"}],"euvd":[{"id":"EUVD-2014-6302","description":"The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissector.","status":"published","published":"2014-09-20T10:00:00Z","modified":"2024-08-06T12:17:23Z","updated_at":"2026-11-03T01:56:59.500212Z"}],"ghsa":[{"id":"GHSA-vf77-5656-m39r","title":"The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media...","description":"The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissector.","status":"published","published":"2022-05-17T04:30:15Z","modified":"2025-04-12T12:39:27Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:18.899916Z"}],"nvd":[{"id":"CVE-2014-6422","description":"The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissector.","status":"published","published":"2014-09-20T10:55:06.183Z","modified":"2026-06-17T00:13:02.973Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:55.884979Z"}],"osv":[{"id":"CVE-2014-6422","description":"The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissector.","status":"published","published":"2014-09-20T10:55:06Z","modified":"2026-04-16T06:15:16.528078015Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-6422","description":"The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissector.","status":"published","published":"2014-09-20T10:55:06.183Z","modified":"2026-10-23T15:47:26.343676585Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"DLA-198-1","title":"wireshark - security update","status":"published","published":"2015-04-14T00:00:00Z","modified":"2026-03-09T01:18:24.480915Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-3049-1","title":"wireshark - security update","status":"published","published":"2014-10-14T00:00:00Z","modified":"2026-03-09T01:21:26.774875Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0386","title":"Updated wireshark packages fix security vulnerabilities","description":"Updated wireshark packages fix security vulnerabilities:\n\nRTP dissector crash (CVE-2014-6421, CVE-2014-6422).\n\nMEGACO dissector infinite loop (CVE-2014-6423).\n\nNetflow dissector crash (CVE-2014-6424).\n\nRTSP dissector crash (CVE-2014-6427).\n\nSES dissector crash (CVE-2014-6428).\n\nSniffer file parser crash (CVE-2014-6429, CVE-2014-6430, CVE-2014-6431,\nCVE-2014-6432).\n","status":"published","published":"2014-09-24T16:44:28Z","modified":"2026-04-16T06:25:33.352871077Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"RHSA-2014:1676","title":"Red Hat Security Advisory: wireshark security update","status":"published","published":"2024-09-15T22:05:31Z","modified":"2026-06-28T10:11:50Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1677","title":"Red Hat Security Advisory: wireshark security update","status":"published","published":"2024-09-15T22:05:37Z","modified":"2026-06-28T10:11:51Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2015:0426-1","title":"Security update for wireshark","description":"\nwireshark has been updated to version 1.10.11 to fix five security issues.\n\nThese security issues have been fixed:\n\n    * SigComp UDVM buffer overflow (CVE-2014-8710).\n    * AMQP dissector crash (CVE-2014-8711).\n    * NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).\n    * TN5250 infinite loops (CVE-2014-8714).\n\nThis non-security issue has been fixed:\n\n    * enable zlib (bnc#899303).\n\nFurther bug fixes and updated protocol support as listed in:\n\nhttps://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html\n\u003chttps://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-8711\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711\u003e\n    * CVE-2014-8710\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710\u003e\n    * CVE-2014-8714\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714\u003e\n    * CVE-2014-8712\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712\u003e\n    * CVE-2014-8713\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713\u003e\n\n","status":"published","published":"2014-11-14T12:53:20Z","modified":"2026-02-04T03:00:53.770544Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0653-1","title":"Security update for wireshark","description":"\nwireshark has been updated to version 1.10.11 to fix five security issues.\n\nThese security issues have been fixed:\n\n    * SigComp UDVM buffer overflow (CVE-2014-8710).\n    * AMQP dissector crash (CVE-2014-8711).\n    * NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).\n    * TN5250 infinite loops (CVE-2014-8714).\n\nThis non-security issue has been fixed:\n\n    * enable zlib (bnc#899303).\n\nFurther bug fixes and updated protocol support as listed in:\n\nhttps://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html\n\u003chttps://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-8711\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711\u003e\n    * CVE-2014-8710\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710\u003e\n    * CVE-2014-8714\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714\u003e\n    * CVE-2014-8712\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712\u003e\n    * CVE-2014-8713\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713\u003e\n\n","status":"published","published":"2014-11-14T12:53:20Z","modified":"2026-02-04T02:27:21.885122Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1098-1","title":"Security update for wireshark","description":"\nwireshark has been updated to version 1.10.11 to fix five security issues.\n\nThese security issues have been fixed:\n\n    * SigComp UDVM buffer overflow (CVE-2014-8710).\n    * AMQP dissector crash (CVE-2014-8711).\n    * NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).\n    * TN5250 infinite loops (CVE-2014-8714).\n\nThis non-security issue has been fixed:\n\n    * enable zlib (bnc#899303).\n\nFurther bug fixes and updated protocol support as listed in:\n\nhttps://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html\n\u003chttps://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-8711\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711\u003e\n    * CVE-2014-8710\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710\u003e\n    * CVE-2014-8714\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714\u003e\n    * CVE-2014-8712\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712\u003e\n    * CVE-2014-8713\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713\u003e\n\n","status":"published","published":"2014-11-14T12:53:20Z","modified":"2026-02-04T02:21:41.735286Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2014-6422","description":"The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissector.","status":"withdrawn","published":"2014-09-20T10:55:00Z","modified":"2025-07-16T08:11:08.539217Z","updated_at":"2026-11-02T15:54:09.378953Z"}]}}