Vulnerability in Wireshark

CVE-2011-1956

The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.

EPSS: 0.059 (92.4th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 1.4.5
  • N/a — versions n/a

References