Lucene search

RedhatCVE-2011-1959

HistoryJun 06, 2011 - 7:55 p.m.

CVE-2011-1959

2011-06-0619:55:02

CWE-119

redhat

web.nvd.nist.gov

wireshark

cve-2011-1959

snoop_read function

denial of service

buffer over-read

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.008

Percentile

81.5%

JSON

The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read.

Affected configurations

Nvd

Node

wiresharkwiresharkMatch1.2

wiresharkwiresharkMatch1.2.0

wiresharkwiresharkMatch1.2.1

wiresharkwiresharkMatch1.2.2

wiresharkwiresharkMatch1.2.3

wiresharkwiresharkMatch1.2.4

wiresharkwiresharkMatch1.2.5

wiresharkwiresharkMatch1.2.6

wiresharkwiresharkMatch1.2.7

wiresharkwiresharkMatch1.2.8

wiresharkwiresharkMatch1.2.9

wiresharkwiresharkMatch1.2.10

wiresharkwiresharkMatch1.2.11

wiresharkwiresharkMatch1.2.12

wiresharkwiresharkMatch1.2.13

wiresharkwiresharkMatch1.2.14

wiresharkwiresharkMatch1.2.15

wiresharkwiresharkMatch1.2.16

Node

wiresharkwiresharkMatch1.4.0

wiresharkwiresharkMatch1.4.1

wiresharkwiresharkMatch1.4.2

wiresharkwiresharkMatch1.4.3

wiresharkwiresharkMatch1.4.4

wiresharkwiresharkMatch1.4.5

wiresharkwiresharkMatch1.4.6

VendorProductVersionCPE
wiresharkwireshark1.2.1cpe:/a:wireshark:wireshark:1.2.1:::
wiresharkwireshark1.2.12cpe:/a:wireshark:wireshark:1.2.12:::
wiresharkwireshark1.2cpe:/a:wireshark:wireshark:1.2:::
wiresharkwireshark1.2.6cpe:/a:wireshark:wireshark:1.2.6:::
wiresharkwireshark1.2.13cpe:/a:wireshark:wireshark:1.2.13:::
wiresharkwireshark1.2.4cpe:/a:wireshark:wireshark:1.2.4:::
wiresharkwireshark1.2.7cpe:/a:wireshark:wireshark:1.2.7:::
wiresharkwireshark1.2.14cpe:/a:wireshark:wireshark:1.2.14:::
wiresharkwireshark1.2.2cpe:/a:wireshark:wireshark:1.2.2:::
wiresharkwireshark1.2.9cpe:/a:wireshark:wireshark:1.2.9:::

Vendor	Product	Version	CPE
wireshark	wireshark	1.2.1	cpe:/a:wireshark:wireshark:1.2.1:::
wireshark	wireshark	1.2.12	cpe:/a:wireshark:wireshark:1.2.12:::
wireshark	wireshark	1.2	cpe:/a:wireshark:wireshark:1.2:::
wireshark	wireshark	1.2.6	cpe:/a:wireshark:wireshark:1.2.6:::
wireshark	wireshark	1.2.13	cpe:/a:wireshark:wireshark:1.2.13:::
wireshark	wireshark	1.2.4	cpe:/a:wireshark:wireshark:1.2.4:::
wireshark	wireshark	1.2.7	cpe:/a:wireshark:wireshark:1.2.7:::
wireshark	wireshark	1.2.14	cpe:/a:wireshark:wireshark:1.2.14:::
wireshark	wireshark	1.2.2	cpe:/a:wireshark:wireshark:1.2.2:::
wireshark	wireshark	1.2.9	cpe:/a:wireshark:wireshark:1.2.9:::