Vulnerability in Wireshark

CVE-2011-2174

Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a packet with malformed data that uses zlib compression.

EPSS: 0.020 (78.4th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 1.2, 1.2.0, 1.2.1
  • N/a — versions n/a

Weakness classification (CWE)

References