Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2014-4020
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-18 Jun, 2014 | 16:55
Updated At-06 May, 2026 | 22:30

The dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10.8 interprets a negative integer as a length value even though it was intended to represent an error condition, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
Type: Primary
Version: 2.0
Base score: 4.3
Base severity: MEDIUM
Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:P
CPE Matches
Wireshark Foundation
wireshark
>>wireshark>>1.10.0
cpe:2.3:a:wireshark:wireshark:1.10.0:*:*:*:*:*:*:*
Wireshark Foundation
wireshark
>>wireshark>>1.10.1
cpe:2.3:a:wireshark:wireshark:1.10.1:*:*:*:*:*:*:*
Wireshark Foundation
wireshark
>>wireshark>>1.10.2
cpe:2.3:a:wireshark:wireshark:1.10.2:*:*:*:*:*:*:*
Wireshark Foundation
wireshark
>>wireshark>>1.10.3
cpe:2.3:a:wireshark:wireshark:1.10.3:*:*:*:*:*:*:*
Wireshark Foundation
wireshark
>>wireshark>>1.10.4
cpe:2.3:a:wireshark:wireshark:1.10.4:*:*:*:*:*:*:*
Wireshark Foundation
wireshark
>>wireshark>>1.10.5
cpe:2.3:a:wireshark:wireshark:1.10.5:*:*:*:*:*:*:*
Wireshark Foundation
wireshark
>>wireshark>>1.10.6
cpe:2.3:a:wireshark:wireshark:1.10.6:*:*:*:*:*:*:*
Wireshark Foundation
wireshark
>>wireshark>>1.10.7
cpe:2.3:a:wireshark:wireshark:1.10.7:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-189Primarynvd@nist.gov
CWE ID: CWE-189
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://lists.opensuse.org/opensuse-updates/2014-06/msg00049.htmlcve@mitre.org
N/A
http://www.wireshark.org/security/wnpa-sec-2014-07.htmlcve@mitre.org
Vendor Advisory
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10030cve@mitre.org
Exploit
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9999cve@mitre.org
Exploit
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=beb119f911a698d44f4baa06d888bb1e775983bccve@mitre.org
N/A
http://lists.opensuse.org/opensuse-updates/2014-06/msg00049.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.wireshark.org/security/wnpa-sec-2014-07.htmlaf854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10030af854a3a-2127-422b-91ae-364da2661108
Exploit
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9999af854a3a-2127-422b-91ae-364da2661108
Exploit
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=beb119f911a698d44f4baa06d888bb1e775983bcaf854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://lists.opensuse.org/opensuse-updates/2014-06/msg00049.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.wireshark.org/security/wnpa-sec-2014-07.html
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10030
Source: cve@mitre.org
Resource:
Exploit
Hyperlink: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9999
Source: cve@mitre.org
Resource:
Exploit
Hyperlink: https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=beb119f911a698d44f4baa06d888bb1e775983bc
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://lists.opensuse.org/opensuse-updates/2014-06/msg00049.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.wireshark.org/security/wnpa-sec-2014-07.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10030
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9999
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=beb119f911a698d44f4baa06d888bb1e775983bc
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found