SB2011070701 - Multiple vulnerabilities in Wireshark

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2011070701

SB2011070701 - Multiple vulnerabilities in Wireshark

Published: July 7, 2011 Updated: August 11, 2020

Security Bulletin ID SB2011070701
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Input validation error (CVE-ID: CVE-2011-2698)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (infinite loop) via an invalid packet.


2) Resource management error (CVE-ID: CVE-2011-2597)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service (infinite loop) via malformed packets.


Remediation

Install update from vendor's website.

References