NVD

Id
9946  
Name
CVE-2011-3266  
Description
The proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed IKE packet and many items in a tree.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-08-23  
Modified Date
2012-08-13  
Seq
2011-3266  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57093 9946 CVE-2011-3266 SUSE-SU-2011:1262  View
57094 9946 CVE-2011-3266 openSUSE-SU-2011:1263  View
57095 9946 CVE-2011-3266 oval:org.mitre.oval:def:15042  View
57096 9946 CVE-2011-3266 8351  View
57097 9946 CVE-2011-3266 1025875  View
57098 9946 CVE-2011-3266 MDVSA-2011:138  View
57099 9946 CVE-2011-3266 20110728 Wireshark 1.6.1 Malformed IKE Packet Denial of Service  View
57100 9946 CVE-2011-3266 49377  View
57101 9946 CVE-2011-3266 http://www.wireshark.org/security/wnpa-sec-2011-13.html  View
57102 9946 CVE-2011-3266 wireshark-prototreeadditem-dos(69411)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34639 JVNDB-2011-004881 Wireshark の proto_tree_add_item 関数におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の proto_tree_add_item 関数には、IKEv1 プロトコル解析部が使用される際、サービス運用妨害 (無限ループ) 状態となる脆弱性が存在します。 CVE-2011-3266 51173 CVE-2011-3266 9946 2.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004881.html 2011-08-23 2012-03-27 View