Vulnerability Details : CVE-2014-8711
Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service (application crash) via a crafted amqp_0_10 PDU in a packet.
Vulnerability category: Denial of service
Products affected by CVE-2014-8711
- cpe:2.3:a:wireshark:wireshark:1.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.10.2:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.10.3:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.10.4:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.10.5:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.10.6:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.10.7:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.10.8:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.10.9:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.10.10:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-8711
2.13%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 83 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-8711
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2014-8711
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-8711
-
http://www.wireshark.org/security/wnpa-sec-2014-21.html
Wireshark · wnpa-sec-2014-21 · AMQP dissector crashVendor Advisory
-
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=8def8ef9c40189472a46d9b1ad95289780e09af5
code.wireshark Code Review - wireshark.git/commit
-
http://lists.opensuse.org/opensuse-updates/2014-11/msg00104.html
openSUSE-SU-2014:1503-1: moderate: update for wireshark
-
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145658.html
[SECURITY] Fedora 21 Update: wireshark-1.12.2-1.fc21
-
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
Oracle Linux Bulletin - October 2015
-
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
Oracle Bulletin Board Update - January 2015
-
http://secunia.com/advisories/60290
Sign in
-
http://secunia.com/advisories/60231
Sign in
-
http://www.securityfocus.com/bid/71070
Wireshark AMQP Dissector CVE-2014-8711 Denial of Service Vulnerability
-
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10582
10582 – AMQP dissector crash
-
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=8f62bb7cce5a82baa543b14800fd7c12548b497a
code.wireshark Code Review - wireshark.git/commit
-
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8def8ef9c40189472a46d9b1ad95289780e09af5
-
http://rhn.redhat.com/errata/RHSA-2015-1460.html
RHSA-2015:1460 - Security Advisory - Red Hat Customer Portal
-
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8f62bb7cce5a82baa543b14800fd7c12548b497a
-
http://www.debian.org/security/2014/dsa-3076
Debian -- Security Information -- DSA-3076-1 wireshark
Jump to