CVE-2011-4100: Medium severity wireshark vulnerability
An uninitialized variable in the CSN.1 dissector in Wireshark 1.6.0 through 1.6.2 could cause Wireshark to crash by reading a malformed packet trace file or if someone were to inject a malformed packet onto the the wire. This is corrected in wireshark 1.6.3.
References:
https://bugs.wireshark.org/bugzilla/showbug.cgi?id=6351 http://anonsvn.wireshark.org/viewvc?view=revision&revision=39140
External References:
http://www.wireshark.org/security/wnpa-sec-2011-17.html
Other sources
The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4100?
CVE-2011-4100 has been classified as a high severity vulnerability due to its potential to crash Wireshark with malformed packets.
How do I fix CVE-2011-4100?
To fix CVE-2011-4100, upgrade Wireshark to version 1.6.3 or later.
Which versions of Wireshark are affected by CVE-2011-4100?
Wireshark versions 1.6.0, 1.6.1, and 1.6.2 are affected by CVE-2011-4100.
What happens if I exploit CVE-2011-4100?
Exploiting CVE-2011-4100 can lead to a crash of the Wireshark application when processing malformed packet trace files.
Is CVE-2011-4100 related to network security?
Yes, CVE-2011-4100 poses a risk to network security by potentially allowing an attacker to disrupt Wireshark's functionality.