CVE-2011-1138: Medium severity wireshark vulnerability
Published Mar 3, 2011
·Updated
Off-by-one error in the dissect6lowpaniphc function in packet-6lowpan.c in Wireshark 1.4.0 through 1.4.3 on 32-bit platforms allows remote attackers to cause a denial of service (application crash) via a malformed 6LoWPAN IPv6 packet.
Affected Software
4 affected components
Wireshark Wireshark=1.4.2
Wireshark Wireshark=1.4.0
Wireshark Wireshark=1.4.3
Wireshark Wireshark=1.4.1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Mar 3, 2011
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1138?
CVE-2011-1138 has a high severity level as it allows remote attackers to crash the application.
2
How do I fix CVE-2011-1138?
To fix CVE-2011-1138, upgrade Wireshark to version 1.4.4 or later.
3
Which versions of Wireshark are affected by CVE-2011-1138?
CVE-2011-1138 affects Wireshark versions 1.4.0 through 1.4.3.
4
What type of attack does CVE-2011-1138 enable?
CVE-2011-1138 enables a denial of service attack through application crashes.
5
Is there any workaround for CVE-2011-1138?
There are no known workarounds for CVE-2011-1138, so upgrading is essential.