CVE-2011-1590: Medium severity wireshark vulnerability
Published Apr 29, 2011
·Updated
The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.
Affected Software
21 affected components
Wireshark Wireshark=1.4.2
Wireshark Wireshark=1.2.7
Wireshark Wireshark=1.4.0
Wireshark Wireshark=1.2.11
Wireshark Wireshark=1.2.10
Wireshark Wireshark=1.2.6
Wireshark Wireshark=1.2.8
Wireshark Wireshark=1.2.0
Wireshark Wireshark=1.2.15
Wireshark Wireshark=1.2.14
Wireshark Wireshark=1.2.3
Wireshark Wireshark=1.2.12
Wireshark Wireshark=1.4.4
Wireshark Wireshark=1.2.13
Wireshark Wireshark=1.2.5
Wireshark Wireshark=1.2.1
Wireshark Wireshark=1.2.4
Wireshark Wireshark=1.4.3
Wireshark Wireshark=1.2.9
Wireshark Wireshark=1.2.2
Wireshark Wireshark=1.4.1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Apr 29, 2011
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1590?
CVE-2011-1590 has a CVSS score indicating a moderate level of severity due to its potential to cause denial of service.
2
How do I fix CVE-2011-1590?
To fix CVE-2011-1590, upgrade to Wireshark version 1.2.16 or 1.4.5 or later.
3
What software versions are affected by CVE-2011-1590?
CVE-2011-1590 affects Wireshark versions 1.2.0 to 1.2.15 and 1.4.0 to 1.4.4.
4
Can CVE-2011-1590 be exploited remotely?
Yes, CVE-2011-1590 can be exploited remotely by sending a crafted .pcap file.
5
What type of attack does CVE-2011-1590 enable?
CVE-2011-1590 enables a denial of service attack that can result in application crashes.