CVE-2011-2698

Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (infinite loop) via an invalid packet.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

2.29% chance of exploitation in the next 30 days, 82th percentile

Published

2011-08-23

Updated

2024-08-06

Proof-of-concept exploits (3)

• http://www.openwall.com/lists/oss-security/2011/07/19/5
• http://www.openwall.com/lists/oss-security/2011/07/20/2
• https://bugzilla.redhat.com/show_bug.cgi?id=723215

References

• CVE Record
• NVD entry

Related

• CVE-2011-2697
• CVE-2011-2702
• CVE-2011-2657
• CVE-2011-2732
• CVE-2011-2653
• CVE-2011-2743