Vulnerability-Lookup

CVE-2014-2299 (GCVE-0-2014-2299)

Vulnerability from cvelistv5 – Published: 2014-03-11 01:00 – Updated: 2024-08-06 10:06

Summary

Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
http://packetstormsecurity.com/files/126337/Wires…	x_refsource_MISC
http://osvdb.org/show/osvdb/104199	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/57489	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2014-0341.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/57480	third-party-advisoryx_refsource_SECUNIA
http://www.wireshark.org/security/wnpa-sec-2014-04.html	x_refsource_CONFIRM
https://bugs.wireshark.org/bugzilla/show_bug.cgi?…	x_refsource_CONFIRM
http://www.exploit-db.com/exploits/33069	exploitx_refsource_EXPLOIT-DB
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE
https://code.wireshark.org/review/gitweb?p=wiresh…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1029907	vdb-entryx_refsource_SECTRACK
http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2014/dsa-2871	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2014-0342.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/66066	vdb-entryx_refsource_BID

Date Public

2014-03-07 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:06:00.278Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html"
          },
          {
            "name": "104199",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/show/osvdb/104199"
          },
          {
            "name": "57489",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57489"
          },
          {
            "name": "RHSA-2014:0341",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0341.html"
          },
          {
            "name": "57480",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57480"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.wireshark.org/security/wnpa-sec-2014-04.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843"
          },
          {
            "name": "33069",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/33069"
          },
          {
            "name": "openSUSE-SU-2014:0382",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f567435ac7140c96a5de56dbce3d5e7659af4d09"
          },
          {
            "name": "1029907",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029907"
          },
          {
            "name": "openSUSE-SU-2014:0383",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html"
          },
          {
            "name": "DSA-2871",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2871"
          },
          {
            "name": "RHSA-2014:0342",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0342.html"
          },
          {
            "name": "66066",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66066"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-07T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-05-14T16:57:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html"
        },
        {
          "name": "104199",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/show/osvdb/104199"
        },
        {
          "name": "57489",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57489"
        },
        {
          "name": "RHSA-2014:0341",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0341.html"
        },
        {
          "name": "57480",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57480"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.wireshark.org/security/wnpa-sec-2014-04.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843"
        },
        {
          "name": "33069",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/33069"
        },
        {
          "name": "openSUSE-SU-2014:0382",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f567435ac7140c96a5de56dbce3d5e7659af4d09"
        },
        {
          "name": "1029907",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029907"
        },
        {
          "name": "openSUSE-SU-2014:0383",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html"
        },
        {
          "name": "DSA-2871",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2871"
        },
        {
          "name": "RHSA-2014:0342",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0342.html"
        },
        {
          "name": "66066",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66066"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-2299",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html"
            },
            {
              "name": "104199",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/show/osvdb/104199"
            },
            {
              "name": "57489",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57489"
            },
            {
              "name": "RHSA-2014:0341",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0341.html"
            },
            {
              "name": "57480",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57480"
            },
            {
              "name": "http://www.wireshark.org/security/wnpa-sec-2014-04.html",
              "refsource": "CONFIRM",
              "url": "http://www.wireshark.org/security/wnpa-sec-2014-04.html"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843",
              "refsource": "CONFIRM",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843"
            },
            {
              "name": "33069",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/33069"
            },
            {
              "name": "openSUSE-SU-2014:0382",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f567435ac7140c96a5de56dbce3d5e7659af4d09",
              "refsource": "CONFIRM",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f567435ac7140c96a5de56dbce3d5e7659af4d09"
            },
            {
              "name": "1029907",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029907"
            },
            {
              "name": "openSUSE-SU-2014:0383",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html"
            },
            {
              "name": "DSA-2871",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2871"
            },
            {
              "name": "RHSA-2014:0342",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0342.html"
            },
            {
              "name": "66066",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66066"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-2299",
    "datePublished": "2014-03-11T01:00:00.000Z",
    "dateReserved": "2014-03-06T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:06:00.278Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2014-2299",
      "date": "2026-09-16",
      "epss": "0.47422",
      "percentile": "0.98778"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"606DF728-1DA6-4989-B40A-44471CC677DB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F824AE6B-B087-4C69-8F73-7B146920FC3C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6702EAA1-7FBD-4755-B7C2-C2B3A1AFF142\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AF6D1967-500E-4E96-A6D2-CE17EA839572\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E8400AD4-ECE9-4810-B559-D4EB03AECC50\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"424B66E9-56F8-4D87-94C6-80F5EA0BD1B2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6BD261DB-1794-473F-BAD9-E5B7771288BD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E1007895-7CC2-4C2D-BACB-BAE6DECDB840\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"392CF289-F905-4D9B-BA51-90F2BCA07BDA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"405C4D3A-79C7-4B87-AB33-2405E1EF21A2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3A9A389B-44E3-48C3-8140-5735E88AA0A9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3A40ABFC-502B-41B1-8745-058AA0690700\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.8.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5957208D-DBF6-42EB-A27A-B9E9D5BC266E\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.10.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"481435A6-4790-4B3E-8EEA-0394A6AB481A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.10.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B0BB28A-9E61-4073-9BE2-C34AB2BCF1EB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.10.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0753BF56-C829-48C3-AA6E-C0A2A1EA1124\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.10.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EC206A02-8259-4FA0-8B6F-D8C58AB946C9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.10.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B973D7E1-523B-4AB9-965F-F8BBD2420CFA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:1.10.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"633AE75A-89BB-458D-9609-2C238DAC25C6\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.\"}, {\"lang\": \"es\", \"value\": \"Desbordamiento de buffer en la funci\\u00f3n mpeg_read en wiretap/mpeg.c en el analizador MPEG en Wireshark 1.8.x anterior a 1.8.13 y 1.10.x anterior a 1.10.6 permite a atacantes remotos ejecutar c\\u00f3digo arbitrario o causar una denegaci\\u00f3n de servicio (ca\\u00edda de aplicaci\\u00f3n) a trav\\u00e9s de un registro grande en datos MPEG.\"}]",
      "id": "CVE-2014-2299",
      "lastModified": "2024-11-21T02:06:01.860",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:C/I:C/A:C\", \"baseScore\": 9.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 8.6, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
      "published": "2014-03-11T13:01:10.280",
      "references": "[{\"url\": \"http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://osvdb.org/show/osvdb/104199\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-0341.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-0342.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/57480\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/57489\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2014/dsa-2871\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.exploit-db.com/exploits/33069\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/66066\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securitytracker.com/id/1029907\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.wireshark.org/security/wnpa-sec-2014-04.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f567435ac7140c96a5de56dbce3d5e7659af4d09\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://osvdb.org/show/osvdb/104199\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-0341.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-0342.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/57480\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/57489\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2014/dsa-2871\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.exploit-db.com/exploits/33069\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/66066\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id/1029907\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.wireshark.org/security/wnpa-sec-2014-04.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f567435ac7140c96a5de56dbce3d5e7659af4d09\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2014-2299\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2014-03-11T13:01:10.280\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.\"},{\"lang\":\"es\",\"value\":\"Desbordamiento de buffer en la funci\u00f3n mpeg_read en wiretap/mpeg.c en el analizador MPEG en Wireshark 1.8.x anterior a 1.8.13 y 1.10.x anterior a 1.10.6 permite a atacantes remotos ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio (ca\u00edda de aplicaci\u00f3n) a trav\u00e9s de un registro grande en datos MPEG.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\"baseScore\":9.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"606DF728-1DA6-4989-B40A-44471CC677DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F824AE6B-B087-4C69-8F73-7B146920FC3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6702EAA1-7FBD-4755-B7C2-C2B3A1AFF142\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF6D1967-500E-4E96-A6D2-CE17EA839572\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8400AD4-ECE9-4810-B559-D4EB03AECC50\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"424B66E9-56F8-4D87-94C6-80F5EA0BD1B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6BD261DB-1794-473F-BAD9-E5B7771288BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1007895-7CC2-4C2D-BACB-BAE6DECDB840\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"392CF289-F905-4D9B-BA51-90F2BCA07BDA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"405C4D3A-79C7-4B87-AB33-2405E1EF21A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A9A389B-44E3-48C3-8140-5735E88AA0A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A40ABFC-502B-41B1-8745-058AA0690700\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.8.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5957208D-DBF6-42EB-A27A-B9E9D5BC266E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"481435A6-4790-4B3E-8EEA-0394A6AB481A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.10.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B0BB28A-9E61-4073-9BE2-C34AB2BCF1EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.10.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0753BF56-C829-48C3-AA6E-C0A2A1EA1124\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.10.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC206A02-8259-4FA0-8B6F-D8C58AB946C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.10.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B973D7E1-523B-4AB9-965F-F8BBD2420CFA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:1.10.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"633AE75A-89BB-458D-9609-2C238DAC25C6\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/show/osvdb/104199\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-0341.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-0342.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/57480\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/57489\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2014/dsa-2871\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.exploit-db.com/exploits/33069\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/66066\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securitytracker.com/id/1029907\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.wireshark.org/security/wnpa-sec-2014-04.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f567435ac7140c96a5de56dbce3d5e7659af4d09\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/show/osvdb/104199\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-0341.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-0342.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/57480\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/57489\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2014/dsa-2871\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.exploit-db.com/exploits/33069\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/66066\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1029907\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.wireshark.org/security/wnpa-sec-2014-04.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f567435ac7140c96a5de56dbce3d5e7659af4d09\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T12:34:40+00:00",
      "cve": "CVE-2014-2299",
      "id": "CVE-2014-2299",
      "initial_release_date": "2014-03-07T00:00:00+00:00",
      "product_status:fixed": "186",
      "product_status:known_not_affected": "4",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "wireshark: buffer overflow in MPEG file parser (wnpa-sec-2014-04)",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-2299.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-23T00:46:17Z",
      "cve": "CVE-2014-2299",
      "id": "CVE-2014-2299",
      "initial_release_date": "2023-02-15T05:29:59Z",
      "product_status:known_not_affected": "122",
      "product_status:recommended": "165",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2014-2299",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2014-2299.json",
      "version": "16"
    }
  }
}

CERTFR-2014-AVI-110

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Wireshark. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Wireshark	Wireshark	Wireshark versions antérieures à 1.8.13
	Wireshark	Wireshark	Wireshark versions antérieures à 1.10.6

References

Title

Publication Time

CERTFR-2014-AVI-110

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Wireshark. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Wireshark	Wireshark	Wireshark versions antérieures à 1.8.13
	Wireshark	Wireshark	Wireshark versions antérieures à 1.10.6

References

Title

Publication Time

FKIE_CVE-2014-2299

Vulnerability from fkie_nvd - Published: 2014-03-11 13:01 - Updated: 2026-06-17 00:06

Severity

Summary

References

URL	Tags
cve@mitre.org	http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html
cve@mitre.org	http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html
cve@mitre.org	http://osvdb.org/show/osvdb/104199
cve@mitre.org	http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html
cve@mitre.org	http://rhn.redhat.com/errata/RHSA-2014-0341.html
cve@mitre.org	http://rhn.redhat.com/errata/RHSA-2014-0342.html
cve@mitre.org	http://secunia.com/advisories/57480
cve@mitre.org	http://secunia.com/advisories/57489
cve@mitre.org	http://www.debian.org/security/2014/dsa-2871
cve@mitre.org	http://www.exploit-db.com/exploits/33069
cve@mitre.org	http://www.securityfocus.com/bid/66066
cve@mitre.org	http://www.securitytracker.com/id/1029907
cve@mitre.org	http://www.wireshark.org/security/wnpa-sec-2014-04.html	Vendor Advisory
cve@mitre.org	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843
cve@mitre.org	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f567435ac7140c96a5de56dbce3d5e7659af4d09
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/show/osvdb/104199
af854a3a-2127-422b-91ae-364da2661108	http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2014-0341.html
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2014-0342.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/57480
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/57489
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2014/dsa-2871
af854a3a-2127-422b-91ae-364da2661108	http://www.exploit-db.com/exploits/33069
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/66066
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1029907
af854a3a-2127-422b-91ae-364da2661108	http://www.wireshark.org/security/wnpa-sec-2014-04.html	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843
af854a3a-2127-422b-91ae-364da2661108	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f567435ac7140c96a5de56dbce3d5e7659af4d09

Impacted products

Vendor	Product	Version
wireshark	wireshark	1.8.0
wireshark	wireshark	1.8.1
wireshark	wireshark	1.8.2
wireshark	wireshark	1.8.3
wireshark	wireshark	1.8.4
wireshark	wireshark	1.8.5
wireshark	wireshark	1.8.6
wireshark	wireshark	1.8.7
wireshark	wireshark	1.8.8
wireshark	wireshark	1.8.9
wireshark	wireshark	1.8.10
wireshark	wireshark	1.8.11
wireshark	wireshark	1.8.12
wireshark	wireshark	1.10.0
wireshark	wireshark	1.10.1
wireshark	wireshark	1.10.2
wireshark	wireshark	1.10.3
wireshark	wireshark	1.10.4
wireshark	wireshark	1.10.5

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "606DF728-1DA6-4989-B40A-44471CC677DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F824AE6B-B087-4C69-8F73-7B146920FC3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "6702EAA1-7FBD-4755-B7C2-C2B3A1AFF142",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF6D1967-500E-4E96-A6D2-CE17EA839572",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8400AD4-ECE9-4810-B559-D4EB03AECC50",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "424B66E9-56F8-4D87-94C6-80F5EA0BD1B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "6BD261DB-1794-473F-BAD9-E5B7771288BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1007895-7CC2-4C2D-BACB-BAE6DECDB840",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "392CF289-F905-4D9B-BA51-90F2BCA07BDA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "405C4D3A-79C7-4B87-AB33-2405E1EF21A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "3A9A389B-44E3-48C3-8140-5735E88AA0A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "3A40ABFC-502B-41B1-8745-058AA0690700",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "5957208D-DBF6-42EB-A27A-B9E9D5BC266E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "481435A6-4790-4B3E-8EEA-0394A6AB481A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.10.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B0BB28A-9E61-4073-9BE2-C34AB2BCF1EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.10.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0753BF56-C829-48C3-AA6E-C0A2A1EA1124",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.10.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC206A02-8259-4FA0-8B6F-D8C58AB946C9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.10.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "B973D7E1-523B-4AB9-965F-F8BBD2420CFA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.10.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "633AE75A-89BB-458D-9609-2C238DAC25C6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de buffer en la funci\u00f3n mpeg_read en wiretap/mpeg.c en el analizador MPEG en Wireshark 1.8.x anterior a 1.8.13 y 1.10.x anterior a 1.10.6 permite a atacantes remotos ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio (ca\u00edda de aplicaci\u00f3n) a trav\u00e9s de un registro grande en datos MPEG."
    }
  ],
  "id": "CVE-2014-2299",
  "lastModified": "2026-06-17T00:06:22.503",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2014-03-11T13:01:10.280",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/show/osvdb/104199"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0341.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0342.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/57480"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/57489"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2014/dsa-2871"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.exploit-db.com/exploits/33069"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/66066"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id/1029907"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.wireshark.org/security/wnpa-sec-2014-04.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f567435ac7140c96a5de56dbce3d5e7659af4d09"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/show/osvdb/104199"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0341.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0342.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/57480"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/57489"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2014/dsa-2871"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.exploit-db.com/exploits/33069"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/66066"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1029907"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.wireshark.org/security/wnpa-sec-2014-04.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f567435ac7140c96a5de56dbce3d5e7659af4d09"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-89XX-9CG2-C9FG

Vulnerability from github – Published: 2022-05-17 03:54 – Updated: 2025-04-12 12:31

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2014-2299"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2014-03-11T13:01:00Z",
    "severity": "HIGH"
  },
  "details": "Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.",
  "id": "GHSA-89xx-9cg2-c9fg",
  "modified": "2025-04-12T12:31:17Z",
  "published": "2022-05-17T03:54:48Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2299"
    },
    {
      "type": "WEB",
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843"
    },
    {
      "type": "WEB",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f567435ac7140c96a5de56dbce3d5e7659af4d09"
    },
    {
      "type": "WEB",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f567435ac7140c96a5de56dbce3d5e7659af4d09"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/show/osvdb/104199"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0341.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0342.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/57480"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/57489"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2014/dsa-2871"
    },
    {
      "type": "WEB",
      "url": "http://www.exploit-db.com/exploits/33069"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/66066"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1029907"
    },
    {
      "type": "WEB",
      "url": "http://www.wireshark.org/security/wnpa-sec-2014-04.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2014-2299

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2014-2299

Aliases

CVE-2014-2299

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2014-2299",
    "description": "Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.",
    "id": "GSD-2014-2299",
    "references": [
      "https://www.suse.com/security/cve/CVE-2014-2299.html",
      "https://www.debian.org/security/2014/dsa-2871",
      "https://access.redhat.com/errata/RHSA-2014:0342",
      "https://access.redhat.com/errata/RHSA-2014:0341",
      "https://advisories.mageia.org/CVE-2014-2299.html",
      "https://alas.aws.amazon.com/cve/html/CVE-2014-2299.html",
      "https://linux.oracle.com/cve/CVE-2014-2299.html",
      "https://packetstormsecurity.com/files/cve/CVE-2014-2299"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2014-2299"
      ],
      "details": "Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.",
      "id": "GSD-2014-2299",
      "modified": "2023-12-13T01:22:46.354615Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2014-2299",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html"
          },
          {
            "name": "104199",
            "refsource": "OSVDB",
            "url": "http://osvdb.org/show/osvdb/104199"
          },
          {
            "name": "57489",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/57489"
          },
          {
            "name": "RHSA-2014:0341",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0341.html"
          },
          {
            "name": "57480",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/57480"
          },
          {
            "name": "http://www.wireshark.org/security/wnpa-sec-2014-04.html",
            "refsource": "CONFIRM",
            "url": "http://www.wireshark.org/security/wnpa-sec-2014-04.html"
          },
          {
            "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843",
            "refsource": "CONFIRM",
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843"
          },
          {
            "name": "33069",
            "refsource": "EXPLOIT-DB",
            "url": "http://www.exploit-db.com/exploits/33069"
          },
          {
            "name": "openSUSE-SU-2014:0382",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html"
          },
          {
            "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f567435ac7140c96a5de56dbce3d5e7659af4d09",
            "refsource": "CONFIRM",
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f567435ac7140c96a5de56dbce3d5e7659af4d09"
          },
          {
            "name": "1029907",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1029907"
          },
          {
            "name": "openSUSE-SU-2014:0383",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html"
          },
          {
            "name": "DSA-2871",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2014/dsa-2871"
          },
          {
            "name": "RHSA-2014:0342",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0342.html"
          },
          {
            "name": "66066",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/66066"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.8.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.10.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.10.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.10.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.10.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:1.10.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-2299"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843"
            },
            {
              "name": "http://www.wireshark.org/security/wnpa-sec-2014-04.html",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.wireshark.org/security/wnpa-sec-2014-04.html"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f567435ac7140c96a5de56dbce3d5e7659af4d09",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f567435ac7140c96a5de56dbce3d5e7659af4d09"
            },
            {
              "name": "DSA-2871",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2014/dsa-2871"
            },
            {
              "name": "openSUSE-SU-2014:0383",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2014:0382",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html"
            },
            {
              "name": "57480",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/57480"
            },
            {
              "name": "57489",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/57489"
            },
            {
              "name": "RHSA-2014:0342",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0342.html"
            },
            {
              "name": "RHSA-2014:0341",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0341.html"
            },
            {
              "name": "33069",
              "refsource": "EXPLOIT-DB",
              "tags": [],
              "url": "http://www.exploit-db.com/exploits/33069"
            },
            {
              "name": "http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html",
              "refsource": "MISC",
              "tags": [],
              "url": "http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html"
            },
            {
              "name": "104199",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/show/osvdb/104199"
            },
            {
              "name": "66066",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/66066"
            },
            {
              "name": "1029907",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id/1029907"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2016-06-02T02:25Z",
      "publishedDate": "2014-03-11T13:01Z"
    }
  }
}

OPENSUSE-SU-2024:10199-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

wireshark-2.2.2-1.1 on GA media

Severity

Moderate

Scope

262 vulnerabilities in this advisory, including CVE-2014-2299.

CVE-2014-2299

Recommended: 16 products

Open the full advisory

RHSA-2014:0341

Vulnerability from csaf_redhat - Published: 2014-03-31 16:31 - Updated: 2026-06-25 10:41

Summary

Red Hat Security Advisory: wireshark security update

Severity

Moderate

Scope

22 vulnerabilities in this advisory, including CVE-2014-2299.

CVE-2014-2299

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Fixed: 26 products

https://access.redhat.com/errata/RHSA-2014:0341

Open the full advisory

RHSA-2014:0342

Vulnerability from csaf_redhat - Published: 2014-03-31 16:36 - Updated: 2026-06-25 10:41

Summary

Red Hat Security Advisory: wireshark security update

Severity

Moderate

Scope

10 vulnerabilities in this advisory, including CVE-2014-2299.

CVE-2014-2299

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Fixed: 54 products

https://access.redhat.com/errata/RHSA-2014:0342

Open the full advisory

RHSA-2014_0341

Vulnerability from csaf_redhat - Published: 2014-03-31 16:31 - Updated: 2024-12-02 06:56

Summary

Red Hat Security Advisory: wireshark security update

Severity

Moderate

Scope

22 vulnerabilities in this advisory, including CVE-2014-2299.

CVE-2014-2299

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Fixed: 48 products

https://access.redhat.com/errata/RHSA-2014:0341

Open the full advisory

RHSA-2014_0342

Vulnerability from csaf_redhat - Published: 2014-03-31 16:36 - Updated: 2024-11-22 07:41

Summary

Red Hat Security Advisory: wireshark security update

Severity

Moderate

Scope

10 vulnerabilities in this advisory, including CVE-2014-2299.

CVE-2014-2299

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Fixed: 138 products

https://access.redhat.com/errata/RHSA-2014:0342

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2014-2299 (GCVE-0-2014-2299)

Solution

Solution

Tags

Sightings

Nomenclature

Related by attack behaviour