CVE-2011-0538: Buffer Overflow
Common Vulnerabilities and Exposures assigned an identifier CVE-2011-0538 to the following vulnerability:
Name: CVE-2011-0538 URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0538 Assigned: 20110120 Reference: MLIST:[oss-security] 20110204 Wireshark: Freeing uninitialized pointer Reference: URL:http://openwall.com/lists/oss-security/2011/02/04/1 Reference: MISC:https://srcm.symantec.com/EditVulnerabilityFixes.aspx?docId=549474 Reference: CONFIRM:https://bugs.wireshark.org/bugzilla/showbug.cgi?id=5652 Reference: BID:46167 Reference: URL:http://www.securityfocus.com/bid/46167
Wireshark 1.5.0, 1.4.3, and earlier frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed file.
Other sources
Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed file.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0538?
CVE-2011-0538 has been classified as high severity due to possible denial of service attacks.
What versions of Wireshark are affected by CVE-2011-0538?
CVE-2011-0538 affects Wireshark versions 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3.
How do I fix CVE-2011-0538?
The best way to fix CVE-2011-0538 is to upgrade Wireshark to a version later than 1.4.3 or 1.2.14.
What kind of vulnerability is CVE-2011-0538?
CVE-2011-0538 is a vulnerability that allows a remote attacker to trigger a denial of service.
Is there a workaround for CVE-2011-0538?
There are no known workarounds for CVE-2011-0538 other than upgrading to a patched version of Wireshark.