CVE-2011-2174

Published Jun 6, 2011

Last updated 7 years ago

Overview

Description: Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a packet with malformed data that uses zlib compression.
Source: secalert@redhat.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.3
Impact score: 2.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: CWE-399

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "26CB9265-B7A4-4EB4-9C20-F747F3786C9D"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1C13C7D5-D344-45D2-9FF0-2C3388C94584"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1D79DA61-F97C-4DCB-A2B7-FE67C5F10964"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "84D6DFA0-53A2-424C-A31C-88FD683E5674"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4B441815-DF95-462C-B9F9-43E2F0B04A45"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4D09E4C0-0C75-4227-87E0-F2A06E240003"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8DE4A9E3-5542-4483-9FA3-7F39C644563B"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FD8A1D30-CB46-4B3D-BED5-1D045F3E1058"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "977DA99C-54EC-4DEA-AD8B-E71C5F77022F"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8ECDB7F8-F97B-440E-98DB-893C4714D47B"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "27611804-AED3-443B-B1AE-25F8337FFA49"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.12:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "77B9C6C4-A6CE-45D0-BE6C-B29E5C7A45C5"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.13:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7B7726D3-607C-4D34-9FBE-ACBDCB1188E5"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.14:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DFB96C81-69F9-49C4-A2FD-D0220A2AB4E1"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.15:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "73A8F429-4E43-4076-8F87-3BAF72306991"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.16:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DE8DCC73-06ED-434C-9191-855F8E64E82E"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ABB6F1D5-64CC-474D-B123-818080ED7903"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A5E0F58D-4CE5-4051-A0F6-9BFA2FC0D2DB"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.4.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1CC3D171-73D0-4A14-A2AA-60C9739CD840"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.4.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CF840746-1797-4ACC-8AFD-8FBD97E9F706"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.4.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "87AA0CD8-5F45-4F3C-B72E-6D94EA4B2C8B"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.4.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7E96B426-8563-4BC2-909A-72457D7159FF"
          },
          {
            "criteria": "cpe:2.3:a:wireshark:wireshark:1.4.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "452E7B6C-88FF-4402-92A2-D417928C3A7F"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References