CVE-2014-5161: The dissect_log function in plugins/irda/packet-irda.c in the IrDA dissector in Wireshark 1.10.x before 1.1...

Security readout for executives and security teams

A crafted IrDA packet could crash Wireshark when an analyst opens or captures traffic with the affected dissector. This is a denial-of-service issue against the analysis workstation, not evidence of data theft or remote code execution. Business urgency is mainly operational: patch legacy Wireshark installations that process untrusted capture files or network traffic. Exposure is likely limited to legacy Wireshark 1.10.x deployments, especially analyst workstations, labs, and servers that automatically process packet captures. Current installations are unlikely to be affected if they run Wireshark 1.10.9 or vendor-patched packages. Prioritize as a legacy-tool resilience issue. It should not outrank actively exploited or code-execution vulnerabilities, but affected security operations tooling should be patched because crafted traffic can disrupt analysis work. Mitigation focus: Upgrade Wireshark 1.10.x installations to 1.10.9 or later.; Apply Debian, SUSE, or openSUSE patched packages where applicable.; Avoid processing untrusted packet captures on vulnerable Wireshark versions..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.