CVE-2011-1956

published 2011-06-06

CVE-2011-1956: The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer…

Priority P4 26 medium 4.3 CVSS 2.0

AV N AC M Au N C N I N A P

EXPLOIT

The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	wireshark	< wireshark 1.4.6-1 (bookworm)	wireshark 1.4.6-1 (bookworm)
wireshark	wireshark	—	—
wireshark	wireshark	>= 0 < 1.4.6-1	1.4.6-1
wireshark	wireshark	>= 0 < 1.4.6-1	1.4.6-1
wireshark	wireshark	>= 0 < 1.4.6-1	1.4.6-1
wireshark	wireshark	>= 0 < 1.4.6-1	1.4.6-1

CVSS provenance

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:N/I:N/A:P

osv 4.3 MEDIUM

vendor_debian 4.3 LOW

vendor_redhat 4.3 MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.