Vulnerability in Wireshark

CVE-2011-2698

Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (infinite loop) via an invalid packet.

EPSS: 0.023 (81.4th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 1.4.0, 1.4.1, 1.4.2
  • N/a — versions n/a

Weakness classification (CWE)

References