CVE-2011-1959 : Szczegóły

CVE-2011-1959

Overflow
1.94%V4
Network
2011-06-06
19h00 +00:00
2024-08-06
22h46 +00:00
Powiadomienia dla konkretnego CVE
Bądź na bieżąco z wszelkimi zmianami dotyczącymi konkretnego CVE.
Zarządzaj powiadomieniami

Opisy CVE

The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read.

Informacje CVE

Powiązane słabości

CWE-ID Nazwa słabości Source
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Metryki

Metryki Wynik Stopień zagrożenia CVSS Wektor Source
V2 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS to model oceniający, który przewiduje prawdopodobieństwo wykorzystania podatności.

Wynik EPSS

Model EPSS generuje wynik prawdopodobieństwa w zakresie od 0 do 1 (0–100%). Im wyższy wynik, tym większe prawdopodobieństwo, że podatność zostanie wykorzystana.

Percentyl EPSS

Percentyl służy do rankingowania CVE według wyniku EPSS. Na przykład CVE w 95. percentylu według wyniku EPSS jest bardziej prawdopodobne do wykorzystania niż 95% innych CVE. Percentyl umożliwia porównanie wyniku EPSS danego CVE z wynikami innych CVE.

Products Mentioned

Configuraton 0

Wireshark>>Wireshark >> Version 1.2

Wireshark>>Wireshark >> Version 1.2.0

Wireshark>>Wireshark >> Version 1.2.1

Wireshark>>Wireshark >> Version 1.2.2

Wireshark>>Wireshark >> Version 1.2.3

Wireshark>>Wireshark >> Version 1.2.4

Wireshark>>Wireshark >> Version 1.2.5

Wireshark>>Wireshark >> Version 1.2.6

Wireshark>>Wireshark >> Version 1.2.7

Wireshark>>Wireshark >> Version 1.2.8

Wireshark>>Wireshark >> Version 1.2.9

Wireshark>>Wireshark >> Version 1.2.10

Wireshark>>Wireshark >> Version 1.2.11

Wireshark>>Wireshark >> Version 1.2.12

Wireshark>>Wireshark >> Version 1.2.13

Wireshark>>Wireshark >> Version 1.2.14

Wireshark>>Wireshark >> Version 1.2.15

Wireshark>>Wireshark >> Version 1.2.16

Configuraton 0

Wireshark>>Wireshark >> Version 1.4.0

Wireshark>>Wireshark >> Version 1.4.1

Wireshark>>Wireshark >> Version 1.4.2

Wireshark>>Wireshark >> Version 1.4.3

Wireshark>>Wireshark >> Version 1.4.4

Wireshark>>Wireshark >> Version 1.4.5

Wireshark>>Wireshark >> Version 1.4.6

Odniesienia

http://secunia.com/advisories/44958
Tags : third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2013-0125.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/48947
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/48066
Tags : vdb-entry, x_refsource_BID
http://www.debian.org/security/2011/dsa-2274
Tags : vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/44449
Tags : third-party-advisory, x_refsource_SECUNIA
http://openwall.com/lists/oss-security/2011/06/01/11
Tags : mailing-list, x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/06/01/1
Tags : mailing-list, x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/05/31/20
Tags : mailing-list, x_refsource_MLIST
http://secunia.com/advisories/45149
Tags : third-party-advisory, x_refsource_SECUNIA