PT-2011-2347 · Wireshark+1 · Wireshark+1

Non-Customers · Published 2011-01-12 · Updated 2017-09-19 · CVE-2011-0444

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.2.0 through 1.2.13 Wireshark versions 1.4.0 through 1.4.2

Description The issue is related to a buffer overflow in the MAC-LTE dissector. This can be exploited by remote attackers to cause a denial of service, potentially leading to a crash, and may also allow the execution of arbitrary code. The attack vector involves a large number of RARs.

Recommendations For Wireshark versions 1.2.0 through 1.2.13, update to a version outside of this range to resolve the issue. For Wireshark versions 1.4.0 through 1.4.2, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting the use of the MAC-LTE dissector until a patch is available.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-0444

RHSA-2011:0369

RHSA-2011_0369

Affected Products

Red Hat

Wireshark

References · 35

• https://linux.oracle.com/errata/ELSA-2011-0369.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/0079 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:007 · Vendor Advisory
• https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5676 · Patch
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5530 · Patch
• http://redhat.com/support/errata/RHSA-2011-0369.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053669.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-0444 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053650.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0444 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-0444 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0444 · Security Note
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/wireshark/cldap.rb · Note
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5652 · Note
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5661 · Note