CVE Vulnerabilities

CVE-2014-8711

Published: Nov 23, 2014 | Modified: Nov 07, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
4.3 MODERATE
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
MEDIUM

Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service (application crash) via a crafted amqp_0_10 PDU in a packet.

Affected Software

Name Vendor Start Version End Version
Wireshark Wireshark 1.10.0 (including) 1.10.0 (including)
Wireshark Wireshark 1.10.1 (including) 1.10.1 (including)
Wireshark Wireshark 1.10.2 (including) 1.10.2 (including)
Wireshark Wireshark 1.10.3 (including) 1.10.3 (including)
Wireshark Wireshark 1.10.4 (including) 1.10.4 (including)
Wireshark Wireshark 1.10.5 (including) 1.10.5 (including)
Wireshark Wireshark 1.10.6 (including) 1.10.6 (including)
Wireshark Wireshark 1.10.7 (including) 1.10.7 (including)
Wireshark Wireshark 1.10.8 (including) 1.10.8 (including)
Wireshark Wireshark 1.10.9 (including) 1.10.9 (including)
Wireshark Wireshark 1.10.10 (including) 1.10.10 (including)
Wireshark Wireshark 1.12.0 (including) 1.12.0 (including)
Wireshark Wireshark 1.12.1 (including) 1.12.1 (including)
Red Hat Enterprise Linux 6 RedHat wireshark-0:1.8.10-17.el6 *
Red Hat Enterprise Linux 7 RedHat wireshark-0:1.10.14-7.el7 *
Wireshark Ubuntu bionic *
Wireshark Ubuntu lucid *
Wireshark Ubuntu precise *
Wireshark Ubuntu trusty *
Wireshark Ubuntu utopic *
Wireshark Ubuntu xenial *

References