CVE-2011-3266 — Infinite Loop in Wireshark

CWE-3996 documents6 sources
Severity
2.6LOWNVD
EPSS
0.9%
top 24.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
WiresharkDebian Wireshark
Timeline
PublishedAug 24
Latest updateMay 14

Description

The proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed IKE packet and many items in a tree.

CVSS vector

AV:N/AC:H/C:N/I:N/A:PExploitability: 4.9 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/wireshark< wireshark 1.6.2-1 (bookworm)
▶Debianwireshark/wireshark< 1.6.2-1+3
▶NVDwireshark/wireshark11 versions+10

🔴Vulnerability Details

2
GHSA
GHSA-h4pp-978c-885j: The proto_tree_add_item function in Wireshark 1↗2022-05-14
▶
OSV
CVE-2011-3266: The proto_tree_add_item function in Wireshark 1↗2011-08-24
▶

📋Vendor Advisories

2
Red Hat
Wireshark proto_tree_add_item DoS↗2011-07-28
▶
Debian
CVE-2011-3266: wireshark - The proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 thro...↗2011
▶

💬Community

1
Bugzilla
CVE-2011-3266 Wireshark proto_tree_add_item DoS↗2011-08-24
▶