SB2011010706 - Multiple vulnerabilities in Wireshark

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2011010706

SB2011010706 - Multiple vulnerabilities in Wireshark

Published: January 7, 2011 Updated: March 24, 2022

Security Bulletin ID SB2011010706
Severity
High
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 50% Medium 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 secuirty vulnerabilities.


1) Input validation error (CVE-ID: CVE-2011-1143)

The vulnerability allows remote attackers to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service (NULL pointer dereference and application crash) via a crafted .pcap file.


2) Buffer overflow (CVE-ID: CVE-2011-0444)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Buffer overflow in the MAC-LTE dissector (epan/dissectors/packet-mac-lte.c) in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of RARs.


3) Resource management error (CVE-ID: CVE-2011-0445)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The ASN.1 BER dissector in Wireshark 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (assertion failure) via crafted packets, as demonstrated by fuzz-2010-12-30-28473.pcap.


4) Buffer overflow (CVE-ID: CVE-2010-4538)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run Length Encoding (RLE) compression.


Remediation

Install update from vendor's website.

References