SB2011020901 - Buffer overflow in Wireshark 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2011020901

SB2011020901 - Buffer overflow in Wireshark

Published: February 9, 2011 Updated: August 11, 2020

Security Bulletin ID SB2011020901
Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Buffer overflow (CVE-ID: CVE-2011-0538)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed file.


Remediation

Install update from vendor's website.

References