CVE-2011-1957

Wireshark 1.2.x < 1.2.17 and 1.4.x < 1.4.7 - Denial of Service via Invalid DICOM PDU Length

Title source: llm
STIX 2.1

Description

The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an invalid PDU length.

References (19)

Core 19
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44958
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html
Vendor Advisory x_refsource_confirm
http://www.wireshark.org/security/wnpa-sec-2011-07.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48947
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/48066
Vendor Advisory x_refsource_confirm
http://www.wireshark.org/security/wnpa-sec-2011-08.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2274
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44449
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14325
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/06/01/11
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/06/01/1
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67790
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/05/31/20
Exploit, Patch x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=710021
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/45149

Scores

EPSS 0.0213
EPSS Percentile 84.4%

Details

CWE
CWE-399
Status published
Products (25)
wireshark/wireshark 1.2
wireshark/wireshark 1.2.0
wireshark/wireshark 1.2.1
wireshark/wireshark 1.2.2
wireshark/wireshark 1.2.3
wireshark/wireshark 1.2.4
wireshark/wireshark 1.2.5
wireshark/wireshark 1.2.6
wireshark/wireshark 1.2.7
wireshark/wireshark 1.2.8
... and 15 more
Published Jun 06, 2011
Tracked Since Feb 18, 2026