4.3

CVE-2011-1957

Exploit
The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an invalid PDU length.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
WiresharkWireshark Version1.2
WiresharkWireshark Version1.2.0
WiresharkWireshark Version1.2.1
WiresharkWireshark Version1.2.2
WiresharkWireshark Version1.2.3
WiresharkWireshark Version1.2.4
WiresharkWireshark Version1.2.5
WiresharkWireshark Version1.2.6
WiresharkWireshark Version1.2.7
WiresharkWireshark Version1.2.8
WiresharkWireshark Version1.2.9
WiresharkWireshark Version1.2.10
WiresharkWireshark Version1.2.11
WiresharkWireshark Version1.2.12
WiresharkWireshark Version1.2.13
WiresharkWireshark Version1.2.14
WiresharkWireshark Version1.2.15
WiresharkWireshark Version1.2.16
WiresharkWireshark Version1.4.0
WiresharkWireshark Version1.4.1
WiresharkWireshark Version1.4.2
WiresharkWireshark Version1.4.3
WiresharkWireshark Version1.4.4
WiresharkWireshark Version1.4.5
WiresharkWireshark Version1.4.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.63% 0.835
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/48947
http://secunia.com/advisories/45149
http://www.debian.org/security/2011/dsa-2274
http://secunia.com/advisories/44449
http://anonsvn.wireshark.org/viewvc?view=revision&revision=36958
Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html
http://openwall.com/lists/oss-security/2011/05/31/20
http://openwall.com/lists/oss-security/2011/06/01/1
http://openwall.com/lists/oss-security/2011/06/01/11
http://secunia.com/advisories/44958
http://www.securityfocus.com/bid/48066
http://www.wireshark.org/security/wnpa-sec-2011-07.html
Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2011-08.html
Vendor Advisory
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5876
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=710021
Patch
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/67790
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14325