CVE-2011-2174

Wireshark <1.2.17, <1.4.7 - Use After Free

Title source: llm
STIX 2.1

Description

Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a packet with malformed data that uses zlib compression.

References (19)

Core 19
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44958
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html
Patch, Vendor Advisory x_refsource_confirm
http://www.wireshark.org/security/wnpa-sec-2011-07.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48947
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/48066
Patch, Vendor Advisory x_refsource_confirm
http://www.wireshark.org/security/wnpa-sec-2011-08.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14777
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2274
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44449
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/06/01/11
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/06/01/1
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67793
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/05/31/20
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/45149

Scores

EPSS 0.0292
EPSS Percentile 86.6%

Details

CWE
CWE-399
Status published
Products (25)
wireshark/wireshark 1.2
wireshark/wireshark 1.2.0
wireshark/wireshark 1.2.1
wireshark/wireshark 1.2.2
wireshark/wireshark 1.2.3
wireshark/wireshark 1.2.4
wireshark/wireshark 1.2.5
wireshark/wireshark 1.2.6
wireshark/wireshark 1.2.7
wireshark/wireshark 1.2.8
... and 15 more
Published Jun 06, 2011
Tracked Since Feb 18, 2026