Vulnerability in Wireshark

CVE-2011-1957

The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an invalid PDU length.

EPSS: 0.026 (83.9th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 1.2, 1.2.0, 1.2.1
  • N/a — versions n/a

Weakness classification (CWE)

References