Skip to content
OpenAdvisories
Unscored RHSA-2014:1676 12 CVEs

Red Hat Security Advisory: wireshark security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client wireshark 0:1.8.10-8.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client wireshark-debuginfo 0:1.8.10-8.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client wireshark-devel 0:1.8.10-8.el6_6
Red Hat · RHEL 6 enterprise_linux:6::client wireshark-gnome 0:1.8.10-8.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server wireshark 0:1.8.10-8.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server wireshark-debuginfo 0:1.8.10-8.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server wireshark-devel 0:1.8.10-8.el6_6
Red Hat · RHEL 6 enterprise_linux:6::server wireshark-gnome 0:1.8.10-8.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation wireshark 0:1.8.10-8.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation wireshark-debuginfo 0:1.8.10-8.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation wireshark-devel 0:1.8.10-8.el6_6
Red Hat · RHEL 6 enterprise_linux:6::workstation wireshark-gnome 0:1.8.10-8.el6_6
Red Hat · RHEL 7 enterprise_linux:7::client wireshark 0:1.10.3-12.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client wireshark-debuginfo 0:1.10.3-12.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client wireshark-devel 0:1.10.3-12.el7_0
Red Hat · RHEL 7 enterprise_linux:7::client wireshark-gnome 0:1.10.3-12.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server wireshark 0:1.10.3-12.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server wireshark-debuginfo 0:1.10.3-12.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server wireshark-devel 0:1.10.3-12.el7_0
Red Hat · RHEL 7 enterprise_linux:7::server wireshark-gnome 0:1.10.3-12.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation wireshark 0:1.10.3-12.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation wireshark-debuginfo 0:1.10.3-12.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation wireshark-devel 0:1.10.3-12.el7_0
Red Hat · RHEL 7 enterprise_linux:7::workstation wireshark-gnome 0:1.10.3-12.el7_0

Vulnerabilities 12

  • Unscored —
    CVE-2014-6421

    Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a…

    wireshark wireshark Debian Ubuntu
  • Unscored —
    CVE-2014-6422

    The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows rem…

    wireshark Debian
  • Unscored —
    CVE-2014-6423

    The tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector in Wireshark 1.10.x before 1.1…

    wireshark Debian
  • Unscored —
    CVE-2014-6424

    The dissect_v9_v10_pdu_data function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x b…

    wireshark Debian
  • Unscored —
    CVE-2014-6425

    The (1) get_quoted_string and (2) get_unquoted_string functions in epan/dissectors/packet-cups.c in the CUPS dissector …

    wireshark Debian
  • Unscored —
    CVE-2014-6426

    The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12.x before 1.12.1 doe…

    wireshark Debian
  • Unscored —
    CVE-2014-6427

    Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wir…

    wireshark Debian
  • Unscored —
    CVE-2014-6428

    The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1…

    wireshark Debian
  • Unscored —
    CVE-2014-6429

    The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10…

    wireshark Debian
  • Unscored —
    CVE-2014-6430

    The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10…

    wireshark Debian
  • Unscored —
    CVE-2014-6431

    Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.…

    wireshark Debian
  • Unscored —
    CVE-2014-6432

    The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10…

    wireshark Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1142602
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1142603
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1142604
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1142606
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1142608
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1142609
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1142610
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1142611
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1676.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-6421
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6421
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6421
  • article
    https://www.wireshark.org/security/wnpa-sec-2014-12.html
  • report
    https://access.redhat.com/security/cve/CVE-2014-6422
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6422
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6422
  • report
    https://access.redhat.com/security/cve/CVE-2014-6423
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6423
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6423
  • article
    https://www.wireshark.org/security/wnpa-sec-2014-13.html
  • report
    https://access.redhat.com/security/cve/CVE-2014-6424
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6424
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6424
  • article
    https://www.wireshark.org/security/wnpa-sec-2014-14.html
  • report
    https://access.redhat.com/security/cve/CVE-2014-6425
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6425
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6425
  • article
    https://www.wireshark.org/security/wnpa-sec-2014-15.html
  • report
    https://access.redhat.com/security/cve/CVE-2014-6426
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6426
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6426
  • article
    https://www.wireshark.org/security/wnpa-sec-2014-16.html
  • report
    https://access.redhat.com/security/cve/CVE-2014-6427
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6427
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6427
  • article
    https://www.wireshark.org/security/wnpa-sec-2014-17.html
  • report
    https://access.redhat.com/security/cve/CVE-2014-6428
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6428