CVE

Id
51178  
CVE No.
CVE-2011-3266  
Status
Candidate  
Description
The proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed IKE packet and many items in a tree.  
Phase
Assigned (20110823)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
552317 51178 CVE-2011-3266 BUGTRAQ:20110728 Wireshark 1.6.1 Malformed IKE Packet Denial of Service  View
552318 51178 CVE-2011-3266 URL:http://www.securityfocus.com/archive/1/archive/1/519049/100/0/threaded  View
552319 51178 CVE-2011-3266 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2011-13.html  View
552320 51178 CVE-2011-3266 MANDRIVA:MDVSA-2011:138  View
552321 51178 CVE-2011-3266 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:138  View
552322 51178 CVE-2011-3266 SUSE:SUSE-SU-2011:1262  View
552323 51178 CVE-2011-3266 URL:http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00021.html  View
552324 51178 CVE-2011-3266 SUSE:openSUSE-SU-2011:1263  View
552325 51178 CVE-2011-3266 URL:http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00022.html  View
552326 51178 CVE-2011-3266 BID:49377  View
552327 51178 CVE-2011-3266 URL:http://www.securityfocus.com/bid/49377  View
552328 51178 CVE-2011-3266 OVAL:oval:org.mitre.oval:def:15042  View
552329 51178 CVE-2011-3266 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15042  View
552330 51178 CVE-2011-3266 SECTRACK:1025875  View
552331 51178 CVE-2011-3266 URL:http://securitytracker.com/id?1025875  View
552332 51178 CVE-2011-3266 SREASON:8351  View
552333 51178 CVE-2011-3266 URL:http://securityreason.com/securityalert/8351  View
552334 51178 CVE-2011-3266 XF:wireshark-prototreeadditem-dos(69411)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32477 JVNDB-2011-002717 Cisco IOS の Smart Install 機能における任意のコードを実行される脆弱性 Cisco IOS の Smart Install 機能には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2011-3271 51178 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002717.html  View