CVE-2011-4100

2011-11-0315:55:00

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.003

Percentile

71.3%

JSON

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

Affected configurations

Nvd

Node

wiresharkwiresharkMatch1.6.0

wiresharkwiresharkMatch1.6.1

wiresharkwiresharkMatch1.6.2

VendorProductVersionCPE
wiresharkwireshark1.6.0cpe:2.3:a:wireshark:wireshark:1.6.0:*:*:*:*:*:*:*
wiresharkwireshark1.6.1cpe:2.3:a:wireshark:wireshark:1.6.1:*:*:*:*:*:*:*
wiresharkwireshark1.6.2cpe:2.3:a:wireshark:wireshark:1.6.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wireshark	wireshark	1.6.0	cpe:2.3:a:wireshark:wireshark:1.6.0:::::::*
wireshark	wireshark	1.6.1	cpe:2.3:a:wireshark:wireshark:1.6.1:::::::*
wireshark	wireshark	1.6.2	cpe:2.3:a:wireshark:wireshark:1.6.2:::::::*