PT-2011-2431 · Wireshark+1 · Wireshark+1

Huzaifa S. Sidhpurwala · Published 2011-02-08 · Updated 2024-06-15 · CVE-2011-0538

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.2.0 through 1.2.14 Wireshark versions 1.4.0 through 1.4.3 Wireshark version 1.5.0

Description The issue occurs during the processing of a .pcap file in the pcap-ng format, where an uninitialized pointer is freed, allowing remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed file.

Recommendations For Wireshark versions 1.2.0 through 1.2.14, update to a version outside of this range to resolve the issue. For Wireshark versions 1.4.0 through 1.4.3, update to a version outside of this range to resolve the issue. For Wireshark version 1.5.0, update to a newer version to resolve the issue.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-0538

DSA-2201-1

OPENSUSE-SU-2024:10199-1

RHSA-2011:0369

RHSA-2011:0370

RHSA-2011_0369

RHSA-2011_0370

Affected Products

Red Hat

Wireshark

References · 312

• 🔥 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5652 · Exploit
• 🔥 https://exploit-db.com/exploits/35314 · Exploit
• 🔥 http://securityfocus.com/bid/46167 · Exploit
• http://mandriva.com/security/advisories?name=MDVSA-2011:044 · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/02/04/1 · Patch
• http://vupen.com/english/advisories/2011/0622 · Vendor Advisory
• http://debian.org/security/2011/dsa-2201 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-0538 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0747 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-0369.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html · Vendor Advisory
• http://secunia.com/advisories/43795 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0626 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0538 · Vendor Advisory