CVE-2011-3266: Low severity wireshark vulnerability
The prototreeadditem function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed IKE packet and many items in a tree.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3266?
CVE-2011-3266 has a severity rating that indicates it can cause a denial of service due to an infinite loop.
How do I fix CVE-2011-3266?
To fix CVE-2011-3266, you should upgrade to a version of Wireshark that is not affected, such as Wireshark 1.6.2 or later.
What versions of Wireshark are affected by CVE-2011-3266?
CVE-2011-3266 affects Wireshark versions 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8.
What type of attack does CVE-2011-3266 involve?
CVE-2011-3266 involves a user-assisted remote attacker exploiting a malformed IKE packet.
Can CVE-2011-3266 be exploited without user interaction?
No, CVE-2011-3266 requires user-assisted action to exploit the vulnerability.