QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2011-1140

Back to search

CVE-2011-1140

Published: Mar 3, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service (infinite recursion) via a crafted (1) SMB or (2) Connection-less LDAP (CLDAP) packet.

VendorProductVersions

n/a

n/a

affected
n/a

References

openSUSE-SU-2011:0347
vendor-advisory
x_refsource_SUSE
43759
third-party-advisory
x_refsource_SECUNIA
FEDORA-2011-2648
vendor-advisory
x_refsource_FEDORA
FEDORA-2011-2620
vendor-advisory
x_refsource_FEDORA
ADV-2011-0747
vdb-entry
x_refsource_VUPEN
44169
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0626
vdb-entry
x_refsource_VUPEN
43795
third-party-advisory
x_refsource_SECUNIA
VU#215900
third-party-advisory
x_refsource_CERT-VN
oval:org.mitre.oval:def:14715
vdb-entry
signature
x_refsource_OVAL
RHSA-2011:0370
vendor-advisory
x_refsource_REDHAT
ADV-2011-0719
vdb-entry
x_refsource_VUPEN
FEDORA-2011-2632
vendor-advisory
x_refsource_FEDORA
ADV-2011-0622
vdb-entry
x_refsource_VUPEN
RHSA-2011:0369
vendor-advisory
x_refsource_REDHAT
MDVSA-2011:044
vendor-advisory
x_refsource_MANDRIVA
1025148
vdb-entry
x_refsource_SECTRACK
DSA-2201
vendor-advisory
x_refsource_DEBIAN
43821
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now