PT-2011-3501 · Wireshark+2 · Wireshark+2

Huzaifa S. Sidhpurwala

+1

·

Publicado

2011-06-06

·

Atualizado

2024-06-15

·

CVE-2011-1959

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.2.x through 1.2.16 Wireshark versions 1.4.x through 1.4.6
Description The issue is related to the snoop read function in wiretap/snoop.c, which does not properly handle certain virtualizable buffers. This allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read.
Recommendations For Wireshark versions 1.2.x through 1.2.16, update to version 1.2.17 or later. For Wireshark versions 1.4.x through 1.4.6, update to version 1.4.7 or later.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CESA-2012_0509
CVE-2011-1959
DSA-2274-1
OPENSUSE-SU-2024:10199-1
RHSA-2012:0509
RHSA-2012_0509
RHSA-2013:0125
RHSA-2013_0125

Produtos afetados

Centos
Red Hat
Wireshark