CVE-2011-1935 pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding....
CriticalCVSS 9.8
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libpcap(Debian:12) | < 1.1.1-4 | 1.1.1-4 |
| debian/libpcap(Debian:13) | < 1.1.1-4 | 1.1.1-4 |
| debian/libpcap(Debian:14) | < 1.1.1-4 | 1.1.1-4 |
| tcpdump libpcap | >= 1.1.1, < 1.2.1 | 1.2.1 |
References
- Debian Security Tracker CVE-2011-1935 issue-tracking third-party-advisory vendor-advisory
- article.gmane.org broken-link issue-tracking third-party-advisory
- thread.gmane.org broken-link issue-tracking patch third-party-advisory
- [oss-security] 20171019 CVE requests: ffmpeg/widelands/jifty::db/lilo/libpcap broken-link issue-tracking mailing-list patch third-party-advisory
- [oss-security] 20140208 Fwd: Old CVE ids, public, but still mailing-list third-party-advisory
- bugs.debian.org
- bugs.debian.org issue-tracking patch third-party-advisory
- bugs.debian.org issue-tracking