CVE-2014-6426 — Infinite Loop in Wireshark

CWE-399CWE-835 — Infinite Loop7 documents6 sources
Severity
5.0MEDIUMNVD
EPSS
0.4%
top 38.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
WiresharkDebian Wireshark
Timeline
PublishedSep 20
Latest updateMay 17

Description

The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12.x before 1.12.1 does not properly handle a NULL tree, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/wireshark< wireshark 1.12.1+g01b65bf-1 (bookworm)
▶Debianwireshark/wireshark< 1.12.1+g01b65bf-1+3

🔴Vulnerability Details

2
GHSA
GHSA-644x-h855-42xq: The dissect_hip_tlv function in epan/dissectors/packet-hip↗2022-05-17
▶
OSV
CVE-2014-6426: The dissect_hip_tlv function in epan/dissectors/packet-hip↗2014-09-20
▶

📋Vendor Advisories

2
Red Hat
wireshark: HIP dissector infinite loop (wnpa-sec-2014-16)↗2014-08-14
▶
Debian
CVE-2014-6426: wireshark - The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissecto...↗2014
▶

💬Community

2
Bugzilla
CVE-2014-6426 wireshark: HIP dissector infinite loop (wnpa-sec-2014-16) [fedora-all]↗2014-10-01
▶
Bugzilla
CVE-2014-6426 wireshark: HIP dissector infinite loop (wnpa-sec-2014-16)↗2014-09-17
▶