Published: 03/03/2011 Updated: 19/09/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark prior to 1.4.4 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted .pcap file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 0.99.3
wireshark wireshark 0.99.4
wireshark wireshark 1.0.10
wireshark wireshark 1.2.13
wireshark wireshark 1.0.8
wireshark wireshark 1.2.3
wireshark wireshark 1.4.2
wireshark wireshark 1.2.7
wireshark wireshark 1.0.2
wireshark wireshark 1.0.3
wireshark wireshark 1.0.4
wireshark wireshark
wireshark wireshark 0.99.5
wireshark wireshark 0.99.6
wireshark wireshark 1.2.5
wireshark wireshark 1.2.1
wireshark wireshark 1.2.0
wireshark wireshark 1.2.4
wireshark wireshark 1.4.1
wireshark wireshark 1.2.12
wireshark wireshark 1.2.6
wireshark wireshark 1.0.15
wireshark wireshark 1.0.16
wireshark wireshark 0.99.2
wireshark wireshark 1.0.5
wireshark wireshark 1.0.9
wireshark wireshark 1.2.10
wireshark wireshark 1.2
wireshark wireshark 1.0.12
wireshark wireshark 1.0.11
wireshark wireshark 1.0.7
wireshark wireshark 1.2.14
wireshark wireshark 1.2.8
wireshark wireshark 1.0.13
wireshark wireshark 0.99.7
wireshark wireshark 0.99.8
wireshark wireshark 1.0.1
wireshark wireshark 1.0.14
wireshark wireshark 1.0.6
wireshark wireshark 1.2.2
wireshark wireshark 1.0.0
wireshark wireshark 1.4.0
wireshark wireshark 1.2.11
wireshark wireshark 1.2.15
wireshark wireshark 1.2.9

Synopsis Moderate: wireshark security update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerab ...

Several flaws were found in Wireshark If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark Several denial of service flaws were found in Wireshark Wireshark could crash or stop responding if it read a malformed packet off a network, o ...

source: wwwsecurityfocuscom/bid/46796/info Wireshark is prone to a remote denial-of-service vulnerability caused by a NULL-pointer dereference error An attacker can exploit this issue to crash the application, resulting in a denial-of-service condition githubcom/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits ...

NVD-CWE-Other https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5157 http://anonsvn.wireshark.org/viewvc?view=rev&revision=34018 http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html http://www.securityfocus.com/bid/46796 http://www.vupen.com/english/advisories/2011/0719 http://www.redhat.com/support/errata/RHSA-2011-0370.html http://secunia.com/advisories/43821 http://www.securitytracker.com/id?1025148 https://hermes.opensuse.org/messages/8086844 http://secunia.com/advisories/44169 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html http://www.vupen.com/english/advisories/2011/0626 http://secunia.com/advisories/43759 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html http://www.kb.cert.org/vuls/id/215900 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html http://secunia.com/advisories/48947 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16209 https://access.redhat.com/errata/RHSA-2012:0509 https://nvd.nist.gov https://www.exploit-db.com/exploits/35432/https://alas.aws.amazon.com/ALAS-2012-71.html

CVE-2011-1143

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect