fkie_cve-2014-2281
Vulnerability from fkie_nvd
Published
2014-03-11 13:01
Modified
2025-04-12 10:46
Severity ?
Summary
The nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted NFS packet.
References
cve@mitre.orghttp://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-nfs.c?r1=54875&r2=54874&pathrev=54875Patch
cve@mitre.orghttp://anonsvn.wireshark.org/viewvc?view=revision&revision=54875Patch
cve@mitre.orghttp://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html
cve@mitre.orghttp://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html
cve@mitre.orghttp://rhn.redhat.com/errata/RHSA-2014-0341.html
cve@mitre.orghttp://rhn.redhat.com/errata/RHSA-2014-0342.html
cve@mitre.orghttp://secunia.com/advisories/57480
cve@mitre.orghttp://secunia.com/advisories/57489
cve@mitre.orghttp://www.debian.org/security/2014/dsa-2871
cve@mitre.orghttp://www.securitytracker.com/id/1029907
cve@mitre.orghttp://www.wireshark.org/security/wnpa-sec-2014-01.htmlVendor Advisory
cve@mitre.orghttps://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark10
cve@mitre.orghttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9672Exploit, Patch
af854a3a-2127-422b-91ae-364da2661108http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-nfs.c?r1=54875&r2=54874&pathrev=54875Patch
af854a3a-2127-422b-91ae-364da2661108http://anonsvn.wireshark.org/viewvc?view=revision&revision=54875Patch
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html
af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2014-0341.html
af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2014-0342.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/57480
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/57489
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2014/dsa-2871
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1029907
af854a3a-2127-422b-91ae-364da2661108http://www.wireshark.org/security/wnpa-sec-2014-01.htmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark10
af854a3a-2127-422b-91ae-364da2661108https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9672Exploit, Patch
Impacted products
Vendor Product Version
wireshark wireshark 1.8.0
wireshark wireshark 1.8.1
wireshark wireshark 1.8.2
wireshark wireshark 1.8.3
wireshark wireshark 1.8.4
wireshark wireshark 1.8.5
wireshark wireshark 1.8.6
wireshark wireshark 1.8.7
wireshark wireshark 1.8.8
wireshark wireshark 1.8.9
wireshark wireshark 1.8.10
wireshark wireshark 1.8.11
wireshark wireshark 1.8.12
wireshark wireshark 1.10.0
wireshark wireshark 1.10.1
wireshark wireshark 1.10.2
wireshark wireshark 1.10.3
wireshark wireshark 1.10.4
wireshark wireshark 1.10.5


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "606DF728-1DA6-4989-B40A-44471CC677DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F824AE6B-B087-4C69-8F73-7B146920FC3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "6702EAA1-7FBD-4755-B7C2-C2B3A1AFF142",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF6D1967-500E-4E96-A6D2-CE17EA839572",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8400AD4-ECE9-4810-B559-D4EB03AECC50",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "424B66E9-56F8-4D87-94C6-80F5EA0BD1B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "6BD261DB-1794-473F-BAD9-E5B7771288BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1007895-7CC2-4C2D-BACB-BAE6DECDB840",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "392CF289-F905-4D9B-BA51-90F2BCA07BDA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "405C4D3A-79C7-4B87-AB33-2405E1EF21A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "3A9A389B-44E3-48C3-8140-5735E88AA0A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "3A40ABFC-502B-41B1-8745-058AA0690700",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.8.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "5957208D-DBF6-42EB-A27A-B9E9D5BC266E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "481435A6-4790-4B3E-8EEA-0394A6AB481A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.10.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B0BB28A-9E61-4073-9BE2-C34AB2BCF1EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.10.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0753BF56-C829-48C3-AA6E-C0A2A1EA1124",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.10.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC206A02-8259-4FA0-8B6F-D8C58AB946C9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.10.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "B973D7E1-523B-4AB9-965F-F8BBD2420CFA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.10.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "633AE75A-89BB-458D-9609-2C238DAC25C6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted NFS packet."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n nfs_name_snoop_add_name en epan/dissectors/packet-nfs.c en el diseccionador de NFS en Wireshark 1.8.x anterior a 1.8.13 y 1.10.x anterior a 1.10.6 no v\u00e1lida un cierto valor de longitud, lo que permite a atacantes remotos causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria y ca\u00edda de aplicaci\u00f3n) a trav\u00e9s de un paquete NFS manipulado."
    }
  ],
  "id": "CVE-2014-2281",
  "lastModified": "2025-04-12T10:46:40.837",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2014-03-11T13:01:10.077",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-nfs.c?r1=54875\u0026r2=54874\u0026pathrev=54875"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://anonsvn.wireshark.org/viewvc?view=revision\u0026revision=54875"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0341.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0342.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/57480"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/57489"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2014/dsa-2871"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id/1029907"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.wireshark.org/security/wnpa-sec-2014-01.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark10"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9672"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-nfs.c?r1=54875\u0026r2=54874\u0026pathrev=54875"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://anonsvn.wireshark.org/viewvc?view=revision\u0026revision=54875"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0341.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0342.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/57480"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/57489"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2014/dsa-2871"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1029907"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.wireshark.org/security/wnpa-sec-2014-01.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark10"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9672"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.