CVE-2011-1590
CVE-2011-1590
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.
EPSS 1.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5793
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:083
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058900.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058993.html
- http://secunia.com/advisories/48947
- http://openwall.com/lists/oss-security/2011/04/18/8
- http://www.wireshark.org/security/wnpa-sec-2011-05.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5754
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15050
- https://hermes.opensuse.org/messages/8701428
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058983.html
- http://www.debian.org/security/2011/dsa-2274
- http://secunia.com/advisories/44374
- http://www.osvdb.org/71846
- http://anonsvn.wireshark.org/viewvc?revision=36608&view=revision
- http://secunia.com/advisories/44822
- http://www.wireshark.org/security/wnpa-sec-2011-06.html
- http://secunia.com/advisories/44172
- http://www.vupen.com/english/advisories/2011/1022
- http://securitytracker.com/id?1025388
- http://openwall.com/lists/oss-security/2011/04/18/2
- http://www.vupen.com/english/advisories/2011/1106
- http://secunia.com/advisories/45149
- https://nvd.nist.gov/vuln/detail/CVE-2011-1590