Which products and versions are affected by CVE-2014-2299?

Affected: Wireshark versions 1.10.0, 1.10.1, 1.10.2, 1.10.3, 1.10.4, 1.10.5, 1.8.0, 1.8.1; wireshark-devel (amazon); wireshark-gnome (oracle), among others. The full list is in the CVE brief.

Is CVE-2014-2299 being exploited in the wild?

It is not listed in any known-exploited vulnerabilities catalog.

Is CVE-2014-2299 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2014-2299?

Public exploit code is available.

Is there a fix for CVE-2014-2299?

Fixed versions are available, including Wireshark 0:1.0.15-6.el5_10, Wireshark 0:1.8.10-7.el6_5, Wireshark 1.0.15-6.0.1.el5_10.

How urgently should CVE-2014-2299 be patched?

Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Request A Demo

Emerging threatsCritical

CVE-2014-2299Wireshark Memory Corruption

Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.

Published Mar 11, 2014 · Updated Aug 11, 2026 · Also known as DEBIAN-CVE-2014-2299, UBUNTU-CVE-2014-2299

Key Facts

Patch immediately

CVE-2014-2299 is a critical-severity vulnerability (CVSS 9.3 v2) affecting Wireshark, wireshark-devel (amazon), wireshark-gnome (oracle) and 2 more products.
It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
EPSS estimates a 47% probability of exploitation in the next 30 days.
Fixed versions are available, including Wireshark 0:1.0.15-6.el5_10, Wireshark 0:1.8.10-7.el6_5, Wireshark 1.0.15-6.0.1.el5_10.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Scores

CVSS v2

9.3

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS (30-day exploit likelihood)

47%

Higher than 98.8% of all scored CVEs

Exploit maturity

Weaponized

ATLAS score

63/100

Publication score, see How it works

Exploitation Verdict

KEV listed

Not listed

Federal due date

None

No federal due date

Ransomware use

Not reported

Attributed actors

None named

Exploit & Defence Guidance

Exploit maturity

Weaponized

Public exploit code

Proof-of-concept links

In-the-wild evidence

Reports of active use

Advisories And Exploit References

advisoryhttps://security-tracker.debian.org/tracker/CVE-2014-2299
advisoryhttps://ubuntu.com/security/CVE-2014-2299
advisoryhttps://www.cve.org/CVERecord?id=CVE-2014-2299
advisoryRHSA-2014:0341
advisoryRHSA-2014:0342
advisoryhttps://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f567435ac7140c96a5de56dbce3d5e7659af4d09

Description

Affected Products

50 affected entries in total

Product	Affected versions	Fixed in
WiresharkWireshark	1.10.0, 1.10.1, 1.10.2, 1.10.3, 1.10.4, 1.10.5, 1.8.0, 1.8.1	1.10.6-1
wireshark-develamazon	See advisory	1.8.10-7.13.amzn1
wireshark-gnomeoracle	See advisory	1.0.15-6.0.1.el5_10
wireshark-ui-gtksuse	See advisory	2.2.2-1.1
wireshark-ui-qtsuse	See advisory	2.2.2-1.1

Patched Releases

Wireshark

0:1.0.15-6.el5_10, 0:1.8.10-7.el6_5, 1.0.15-6.0.1.el5_10, 1.10.11-0.2.1, 1.10.6-1, 1.2.11-6+squeeze14, 1.8.10-7.0.1.el6_5, 1.8.10-7.13.amzn1, 1.8.2-5wheezy10, 2.2.2-1.1

wireshark-devel

1.10.11-0.2.1, 1.8.10-7.0.1.el6_5, 1.8.10-7.13.amzn1, 2.2.2-1.1

wireshark-gnome

1.0.15-6.0.1.el5_10, 1.8.10-7.0.1.el6_5

wireshark-ui-gtk

2.2.2-1.1

wireshark-ui-qt