Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-1140

medium · 4.3

Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service (infinite recursion) via a crafted (1) SMB or (2) Connection-less LDAP (CLDAP) packet.

4.3
CVSS
13.1%
EPSS (exploit prob.)
96th
EPSS percentile
2011-03-03
Published

AV:N/AC:M/Au:N/C:N/I:N/A:P

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
wiresharkwireshark1.0
wiresharkwireshark1.0.0
wiresharkwireshark1.0.1
wiresharkwireshark1.0.2
wiresharkwireshark1.0.3
wiresharkwireshark1.0.4
wiresharkwireshark1.0.5
wiresharkwireshark1.0.6
wiresharkwireshark1.0.7
wiresharkwireshark1.0.8
wiresharkwireshark1.0.9
wiresharkwireshark1.0.10
wiresharkwireshark1.0.11
wiresharkwireshark1.0.12
wiresharkwireshark1.0.13
wiresharkwireshark1.0.14
wiresharkwireshark1.0.15
wiresharkwireshark1.0.16
wiresharkwireshark1.2.0
wiresharkwireshark1.2.1
wiresharkwireshark1.2.2
wiresharkwireshark1.2.3
wiresharkwireshark1.2.4
wiresharkwireshark1.2.5
wiresharkwireshark1.2.6
wiresharkwireshark1.2.7
wiresharkwireshark1.2.8
wiresharkwireshark1.2.9
wiresharkwireshark1.2.10
wiresharkwireshark1.2.11
wiresharkwireshark1.2.12
wiresharkwireshark1.2.13
wiresharkwireshark1.2.14
wiresharkwireshark1.4.0
wiresharkwireshark1.4.1
wiresharkwireshark1.4.2
wiresharkwireshark1.4.3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-1140