5

CVE-2014-6421

Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
WiresharkWireshark Version1.10.0
WiresharkWireshark Version1.10.1
WiresharkWireshark Version1.10.2
WiresharkWireshark Version1.10.3
WiresharkWireshark Version1.10.4
WiresharkWireshark Version1.10.5
WiresharkWireshark Version1.10.6
WiresharkWireshark Version1.10.7
WiresharkWireshark Version1.10.8
WiresharkWireshark Version1.10.9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.616
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P