CVE-2011-2597

The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service (infinite loop) via malformed packets.

Published: Jul 7, 2011
Updated: Apr 13, 2023
CVE: CVE-2011-2597
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P

CWEs:

CWE-399

Affected Software
References

Software	From	Fixed in
wireshark / wireshark	1.2.7	1.2.7.x
wireshark / wireshark	1.2.11	1.2.11.x
wireshark / wireshark	1.2.10	1.2.10.x
wireshark / wireshark	1.2.6	1.2.6.x
wireshark / wireshark	1.2.8	1.2.8.x
wireshark / wireshark	1.2.0	1.2.0.x
wireshark / wireshark	1.2.15	1.2.15.x
wireshark / wireshark	1.2.14	1.2.14.x
wireshark / wireshark	1.2.3	1.2.3.x
wireshark / wireshark	1.2.12	1.2.12.x
wireshark / wireshark	1.2.13	1.2.13.x
wireshark / wireshark	1.2.17	1.2.17.x
wireshark / wireshark	1.2.5	1.2.5.x
wireshark / wireshark	1.2.1	1.2.1.x
wireshark / wireshark	1.2.4	1.2.4.x
wireshark / wireshark	1.2	1.2.x
wireshark / wireshark	1.2.9	1.2.9.x
wireshark / wireshark	1.2.2	1.2.2.x
wireshark / wireshark	1.2.16	1.2.16.x
wireshark / wireshark	1.4.7	1.4.7.x
wireshark / wireshark	1.4.2	1.4.2.x
wireshark / wireshark	1.4.0	1.4.0.x
wireshark / wireshark	1.4.5	1.4.5.x
wireshark / wireshark	1.4.4	1.4.4.x
wireshark / wireshark	1.4.6	1.4.6.x
wireshark / wireshark	1.4.3	1.4.3.x
wireshark / wireshark	1.4.1	1.4.1.x
wireshark / wireshark	1.6.0	1.6.0.x

Vulnerability Database

290,206

CVE-2011-2597