CVE-2011-1592 — Wireshark vulnerability

CWE-1893 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
1.4%
top 19.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
WiresharkDebian Wireshark
Timeline
PublishedApr 29
Latest updateMay 17

Description

The NFS dissector in epan/dissectors/packet-nfs.c in Wireshark 1.4.x before 1.4.5 on Windows uses an incorrect integer data type during decoding of SETCLIENTID calls, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDwireshark/wireshark5 versions+4

Patches

Patch: anonsvn.wireshark.org ↗Patch: openwall.com ↗Patch: openwall.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-7vq3-q4r7-7h76: The NFS dissector in epan/dissectors/packet-nfs↗2022-05-17
▶

📋Vendor Advisories

1
Debian
CVE-2011-1592: wireshark - The NFS dissector in epan/dissectors/packet-nfs.c in Wireshark 1.4.x before 1.4....↗2011
▶