CVE-2011-0444 Buffer overflow in the MAC-LTE dissector (epan/dissectors/packet-mac-lte.c) in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (crash) and p...
HighCVSS 10.0
EPSS 7.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the MAC-LTE dissector (epan/dissectors/packet-mac-lte.c) in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of RARs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wireshark | = 1.2 | No fix listed |
| wireshark | = 1.2.0 | No fix listed |
| wireshark | = 1.2.1 | No fix listed |
| wireshark | = 1.2.2 | No fix listed |
| wireshark | = 1.2.3 | No fix listed |
| wireshark | = 1.2.4 | No fix listed |
| wireshark | = 1.2.5 | No fix listed |
| wireshark | = 1.2.6 | No fix listed |
| wireshark | = 1.2.7 | No fix listed |
| wireshark | = 1.2.8 | No fix listed |
| wireshark | = 1.2.9 | No fix listed |
| wireshark | = 1.2.10 | No fix listed |
| wireshark | = 1.2.11 | No fix listed |
| wireshark | = 1.2.12 | No fix listed |
| wireshark | = 1.2.13 | No fix listed |
| wireshark | = 1.4.0 | No fix listed |
| wireshark | = 1.4.1 | No fix listed |
| wireshark | = 1.4.2 | No fix listed |
| debian/wireshark(Debian:12) | < 1.2.11-6 | 1.2.11-6 |
| debian/wireshark(Debian:13) | < 1.2.11-6 | 1.2.11-6 |
| debian/wireshark(Debian:14) | < 1.2.11-6 | 1.2.11-6 |
References
- FEDORA-2011-0450 vendor-advisory
- FEDORA-2011-0460 vendor-advisory
- 70403 vdb-entry
- 43175 third-party-advisory
- MDVSA-2011:007 vendor-advisory
- RHSA-2011:0369 vendor-advisory
- 45775 vdb-entry
- ADV-2011-0079 vdb-entry vendor-advisory
- ADV-2011-0104 vdb-entry
- ADV-2011-0270 vdb-entry
- ADV-2011-0719 vdb-entry
- www.wireshark.org
- www.wireshark.org
- bugs.wireshark.org patch
- bugs.wireshark.org patch
- wireshark-maclte-bo(64624) vdb-entry
- oval:org.mitre.oval:def:14283 signature vdb-entry
- Debian Security Tracker CVE-2011-0444 vendor-advisory