Published: 07/07/2011 Updated: 19/09/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The Lucent/Ascend file parser in Wireshark 1.2.x prior to 1.2.18, 1.4.x up to and including 1.4.7, and 1.6.0 allows remote malicious users to cause a denial of service (infinite loop) via malformed packets.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 1.2.12
wireshark wireshark 1.2.11
wireshark wireshark 1.2.4
wireshark wireshark 1.2.1
wireshark wireshark 1.2.7
wireshark wireshark 1.2.6
wireshark wireshark 1.2.0
wireshark wireshark 1.2.16
wireshark wireshark 1.2.9
wireshark wireshark 1.2
wireshark wireshark 1.2.14
wireshark wireshark 1.2.13
wireshark wireshark 1.2.2
wireshark wireshark 1.2.15
wireshark wireshark 1.2.10
wireshark wireshark 1.2.8
wireshark wireshark 1.2.5
wireshark wireshark 1.2.3
wireshark wireshark 1.2.17
wireshark wireshark 1.4.1
wireshark wireshark 1.4.0
wireshark wireshark 1.4.6
wireshark wireshark 1.4.5
wireshark wireshark 1.4.3
wireshark wireshark 1.4.2
wireshark wireshark 1.4.4
wireshark wireshark 1.4.7
wireshark wireshark 1.6.0

Synopsis Moderate: wireshark security update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerab ...

Debian Bug report logs - #776135 wireshark: Multiple security issues in 1122 and prior versions Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: balint@balintreczeyhu Date: Sat, 24 Jan 2015 10:51:01 UTC Severity: ...

Debian Bug report logs - #780372 CVE-2015-2187 CVE-2015-2188 CVE-2015-2189 CVE-2015-2190 CVE-2015-2191 CVE-2015-2192 Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Th ...

CWE-399 http://secunia.com/advisories/45086 http://securitytracker.com/id?1025738 http://www.wireshark.org/security/wnpa-sec-2011-10.html http://www.securityfocus.com/bid/48506 http://www.wireshark.org/security/wnpa-sec-2011-09.html http://www.wireshark.org/security/wnpa-sec-2011-11.html http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063591.html http://secunia.com/advisories/45574 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063586.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:118 http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00022.html http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00021.html http://secunia.com/advisories/48947 https://exchange.xforce.ibmcloud.com/vulnerabilities/68335 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14794 https://access.redhat.com/errata/RHSA-2012:0509 https://nvd.nist.gov

CVE-2011-2597

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect