1142608 – (CVE-2014-6425) CVE-2014-6425 wireshark: CUPS dissector crash (wnpa-sec-2014-15)

Bug 1142608 (CVE-2014-6425) - CVE-2014-6425 wireshark: CUPS dissector crash (wnpa-sec-2014-15)

Summary: CVE-2014-6425 wireshark: CUPS dissector crash (wnpa-sec-2014-15)

Keywords:
Status:	CLOSED ERRATA
Alias:	CVE-2014-6425
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	medium
Severity:	medium
Target Milestone:	---
Assignee:	Red Hat Product Security
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	1148263 1148264 1148265 1148266 1148267 1148282
Blocks:	1142615
TreeView+	depends on / blocked

Reported:	2014-09-17 06:09 UTC by Murray McAllister
Modified:	2021-02-17 06:12 UTC (History)
CC List:	8 users (show)
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed:	2014-10-22 11:56:58 UTC
Embargoed:

Attachments	(Terms of Use)

Links
System	ID	Private	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2014:1676	0	normal	SHIPPED_LIVE	Moderate: wireshark security update	2014-10-22 00:22:29 UTC
Red Hat Product Errata	RHSA-2014:1677	0	normal	SHIPPED_LIVE	Moderate: wireshark security update	2014-10-21 23:41:40 UTC

Description Murray McAllister 2014-09-17 06:09:53 UTC

It was reported that Wireshark's CUPS dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

This is reported to affect version 1.12.0. This version is not shipped in Fedora or Red Hat Enterprise Linux.

External References:

https://www.wireshark.org/security/wnpa-sec-2014-15.html

Comment 1 Siddharth Sharma 2014-09-29 13:18:31 UTC

upstream fix
------------

https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c10396dbbf782a576bc1f9a931cf86090cec3878

Comment 3 Siddharth Sharma 2014-10-01 06:09:28 UTC

Created wireshark tracking bugs for this issue:

Affects: fedora-all [bug 1148282]

Comment 4 errata-xmlrpc 2014-10-21 19:42:11 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 5

Via RHSA-2014:1677 https://rhn.redhat.com/errata/RHSA-2014-1677.html

Comment 5 errata-xmlrpc 2014-10-21 20:22:54 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6
  Red Hat Enterprise Linux 7

Via RHSA-2014:1676 https://rhn.redhat.com/errata/RHSA-2014-1676.html

Note You need to log in before you can comment on or make changes to this bug.