CVE-2011-0713 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Wireshark

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-122 — Heap-based Buffer Overflow6 documents6 sources
Severity
6.8MEDIUMNVD
EPSS
4.1%
top 11.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
WiresharkDebian Wireshark
Timeline
PublishedMar 3
Latest updateMay 17

Description

Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long record in a Nokia DCT3 trace file.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶debiandebian/wireshark< wireshark 1.4.4-1 (bookworm)
▶Debianwireshark/wireshark< 1.4.4-1+3
▶NVDwireshark/wireshark19 versions+18

Patches

Patch: anonsvn.wireshark.org ↗Patch: anonsvn.wireshark.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-f84x-5jrq-4c3p: Heap-based buffer overflow in wiretap/dct3trace↗2022-05-17
▶
OSV
CVE-2011-0713: Heap-based buffer overflow in wiretap/dct3trace↗2011-03-03
▶

📋Vendor Advisories

2
Red Hat
Wireshark: heap-based buffer overflow when reading malformed Nokia DCT3 phone signalling traces↗2011-02-16
▶
Debian
CVE-2011-0713: wireshark - Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2...↗2011
▶

💬Community

1
Bugzilla
CVE-2011-0713 Wireshark: heap-based buffer overflow when reading malformed Nokia DCT3 phone signalling traces↗2011-02-17
▶