CVE-2011-1142

Severity

50%

Complexity

99%

Confidentiality

48%

Stack consumption vulnerability in the dissect_ber_choice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service (infinite loop) via vectors involving self-referential ASN.1 CHOICE values.

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P).

Overview

Type

Wireshark

First reported 14 years ago

2011-03-03 01:00:00

Last updated 7 years ago

2017-09-19 01:32:00

Affected Software

Wireshark 1.2.0

1.2.0

Wireshark 1.2.1

1.2.1

Wireshark 1.2.2

1.2.2

Wireshark 1.2.3

1.2.3

Wireshark 1.2.4

1.2.4

Wireshark 1.2.5

1.2.5

Wireshark 1.2.6

1.2.6

Wireshark 1.2.7

1.2.7

Wireshark 1.2.8

1.2.8

Wireshark 1.2.9

1.2.9

Wireshark 1.2.10

1.2.10

Wireshark 1.2.11

1.2.11

Wireshark 1.2.12

1.2.12

Wireshark 1.2.13

1.2.13

Wireshark 1.2.14

1.2.14

Wireshark 1.2.15

1.2.15

Wireshark 1.4.0

1.4.0

Wireshark 1.4.1

1.4.1

Wireshark 1.4.2

1.4.2

Wireshark 1.4.3

1.4.3

Wireshark 1.4.4

1.4.4

References

MDVSA-2011:044

1025148

ADV-2011-0622

http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html

Patch

http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html