Vulnerability CVE-2014-2283: Information
Description
epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches, which allows remote attackers to cause a denial of service (use-after-free error and application crash) via a crafted UMTS Radio Link Control packet.
Severity: MEDIUM (4.3)
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| wireshark | sisyphus | 1.10.6-alt1 | 4.2.5-alt2 | ALT-PU-2014-1296-1 | 116427 | Fixed |
| wireshark | p10 | 1.10.6-alt1 | 4.0.11-alt1 | ALT-PU-2014-1296-1 | 116427 | Fixed |
| wireshark | p9 | 1.10.6-alt1 | 4.0.8-alt1 | ALT-PU-2014-1296-1 | 116427 | Fixed |
| wireshark | c10f1 | 1.10.6-alt1 | 4.0.11-alt1 | ALT-PU-2014-1296-1 | 116427 | Fixed |
| wireshark | c9f2 | 1.10.6-alt1 | 4.0.11-alt1 | ALT-PU-2014-1296-1 | 116427 | Fixed |
| wireshark | c7 | 2.2.7-alt1.M70C.1 | 2.2.7-alt1.M70C.1 | ALT-PU-2017-1698-1 | 183820 | Fixed |
| wireshark | p11 | 1.10.6-alt1 | 4.2.5-alt2 | ALT-PU-2014-1296-1 | 116427 | Fixed |