Unrated
lwipv6 — security advisory
resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets.
- Products
- lwipv6
- Affected versions
- 1.5a-10, 1.5a-10.1, 1.5a-10.1build1, 1.5a-2ubuntu2, 1.5a-4, 1.5a-9, 1.5a-9.1, 1.5a-9.1build1
- Fixed versions
- Not specified
- CVEs
- CVE-2014-4883
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:20 UTC · Revision 1
Source evidence
resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets.
osv:UBUNTU-CVE-2014-4883
lwipv6
Fixed versions: Not specified
lwipv6
Fixed versions: Not specified
lwipv6
Fixed versions: Not specified
lwipv6
Fixed versions: Not specified
lwipv6
Fixed versions: Not specified
lwipv6
Fixed versions: Not specified
lwipv6
Fixed versions: Not specified
lwipv6
Fixed versions: Not specified
Complete source record
{
"id": "998c0701ea8265237209631c2ffa17371b5dd59f358dbb84d3231908669b0ba4",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2014-4883",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2014-4883",
"summary": "resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets.",
"evidence": "osv:UBUNTU-CVE-2014-4883",
"products": [
{
"name": {
"value": "lwipv6",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.5a-2ubuntu2",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "lwipv6",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.5a-2ubuntu2",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "lwipv6",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.5a-4",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "lwipv6",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.5a-9",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "lwipv6",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.5a-9",
"evidence": "/affected/4/versions"
},
{
"value": "1.5a-9.1",
"evidence": "/affected/4/versions"
},
{
"value": "1.5a-9.1build1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "lwipv6",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.5a-10",
"evidence": "/affected/5/versions"
},
{
"value": "1.5a-10.1",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "lwipv6",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.5a-10.1build1",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "lwipv6",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.5a-10.1",
"evidence": "/affected/7/versions"
},
{
"value": "1.5a-10.1build1",
"evidence": "/affected/7/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "UBUNTU-CVE-2014-4883",
"aliases": [
"UBUNTU-CVE-2014-4883"
],
"metrics": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "lwipv6",
"purl": "pkg:deb/ubuntu/lwipv6?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1.5a-2ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-4883.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "liblwipv6-2",
"binary_version": "1.5a-2ubuntu2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "lwipv6",
"purl": "pkg:deb/ubuntu/lwipv6?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.5a-2ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-4883.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "liblwipv6-2",
"binary_version": "1.5a-2ubuntu2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "lwipv6",
"purl": "pkg:deb/ubuntu/lwipv6?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"1.5a-4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-4883.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "liblwipv6-2",
"binary_version": "1.5a-4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "lwipv6",
"purl": "pkg:deb/ubuntu/lwipv6?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1.5a-9"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-4883.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "liblwipv6-2",
"binary_version": "1.5a-9"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "lwipv6",
"purl": "pkg:deb/ubuntu/lwipv6?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"1.5a-9",
"1.5a-9.1",
"1.5a-9.1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-4883.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "liblwipv6-2t64",
"binary_version": "1.5a-9.1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "lwipv6",
"purl": "pkg:deb/ubuntu/lwipv6?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"1.5a-10",
"1.5a-10.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-4883.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "liblwipv6-2t64",
"binary_version": "1.5a-10.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "lwipv6",
"purl": "pkg:deb/ubuntu/lwipv6?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"1.5a-10.1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-4883.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "liblwipv6-2t64",
"binary_version": "1.5a-10.1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "lwipv6",
"purl": "pkg:deb/ubuntu/lwipv6?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"1.5a-10.1",
"1.5a-10.1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-4883.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "liblwipv6-2t64",
"binary_version": "1.5a-10.1build1"
}
]
}
}
],
"modified": "2026-10-17T12:52:40.064981251Z",
"provider": "osv",
"upstream": [
"CVE-2014-4883"
],
"references": [
"https://ubuntu.com/security/CVE-2014-4883",
"https://bugzilla.redhat.com/show_bug.cgi?id=1169008",
"https://www.cve.org/CVERecord?id=CVE-2014-4883"
]
},
"related_cves": [
{
"value": "CVE-2014-4883",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 353263,
"published_at": "2014-11-28T02:59:00+00:00"
}