CVE-2011-1959

Wireshark 1.2.x < 1.2.17 and 1.4.x < 1.4.7 - Denial of Service via Snoop File Buffer Over-Read

Title source: llm
STIX 2.1

Description

The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read.

References (20)

Core 20
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67792
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44958
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html
Vendor Advisory x_refsource_confirm
http://www.wireshark.org/security/wnpa-sec-2011-07.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0125.html
Exploit, Patch x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=710039
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48947
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/48066
Vendor Advisory x_refsource_confirm
http://www.wireshark.org/security/wnpa-sec-2011-08.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2274
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44449
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/06/01/11
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/06/01/1
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/05/31/20
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/45149
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14656

Scores

EPSS 0.0194
EPSS Percentile 83.7%

Details

CWE
CWE-119
Status published
Products (25)
wireshark/wireshark 1.2
wireshark/wireshark 1.2.0
wireshark/wireshark 1.2.1
wireshark/wireshark 1.2.2
wireshark/wireshark 1.2.3
wireshark/wireshark 1.2.4
wireshark/wireshark 1.2.5
wireshark/wireshark 1.2.6
wireshark/wireshark 1.2.7
wireshark/wireshark 1.2.8
... and 15 more
Published Jun 06, 2011
Tracked Since Feb 18, 2026