CVE-2011-1956 - Vulnerability Details - OpenCVE

The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.0647.

Key SSVC decision points have not yet been added.

Vendors	Products
Wireshark	Wireshark

Configuration 1 [-]

cpe:2.3:a:wireshark:wireshark:1.4.5:*:*:*:*:*:*:*

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://openwall.com/lists/oss-security/2011/05/31/19
http://openwall.com/lists/oss-security/2011/06/01/9
http://secunia.com/advisories/44449
http://www.wireshark.org/docs/relnotes/wireshark-1.4.6.html
http://www.wireshark.org/news/20110418.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5837
https://exchange.xforce.ibmcloud.com/vulnerabilities/67789
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14943

History

Fri, 11 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.05783}`	epss `{'score': 0.06272}`

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2011-06-06T19:00:00

Updated: 2024-08-06T22:46:00.933Z

Reserved: 2011-05-09T00:00:00

Link: CVE-2011-1956

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2011-06-06T19:55:02.660

Modified: 2025-04-11T00:51:21.963

Link: CVE-2011-1956

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-04-18T00:00:00", "descriptions": [{"lang": "en", "value": "The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-18T12:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.wireshark.org/news/20110418.html"}, {"name": "[oss-security] 20110531 CVE request for Wireshark 1.4.5 TCP DoS issue", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2011/05/31/19"}, {"name": "oval:org.mitre.oval:def:14943", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14943"}, {"name": "wireshark-desegmenttcp-dos(67789)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67789"}, {"name": "[oss-security] 20110601 Re: CVE request for Wireshark 1.4.5 TCP DoS issue", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2011/06/01/9"}, {"name": "44449", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/44449"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.wireshark.org/docs/relnotes/wireshark-1.4.6.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5837"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T22:46:00.933Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.wireshark.org/news/20110418.html"}, {"name": "[oss-security] 20110531 CVE request for Wireshark 1.4.5 TCP DoS issue", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://openwall.com/lists/oss-security/2011/05/31/19"}, {"name": "oval:org.mitre.oval:def:14943", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14943"}, {"name": "wireshark-desegmenttcp-dos(67789)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67789"}, {"name": "[oss-security] 20110601 Re: CVE request for Wireshark 1.4.5 TCP DoS issue", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://openwall.com/lists/oss-security/2011/06/01/9"}, {"name": "44449", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/44449"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.wireshark.org/docs/relnotes/wireshark-1.4.6.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5837"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2011-1956", "datePublished": "2011-06-06T19:00:00", "dateReserved": "2011-05-09T00:00:00", "dateUpdated": "2024-08-06T22:46:00.933Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wireshark:wireshark:1.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "7E96B426-8563-4BC2-909A-72457D7159FF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic."}, {"lang": "es", "value": "Funci\u00f3n bytes_repr_len en Wireshark v1.4.5 utiliza un argumento de puntero incorrecto, lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio ( desreferenciar punteros nulos y bloqueo de la aplicaci\u00f3n ) a trav\u00e9s tr\u00e1fico TCP arbitrario."}], "evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/476.html\r\n'CWE-476: NULL Pointer Dereference'", "id": "CVE-2011-1956", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2011-06-06T19:55:02.660", "references": [{"source": "secalert@redhat.com", "tags": ["Exploit"], "url": "http://openwall.com/lists/oss-security/2011/05/31/19"}, {"source": "secalert@redhat.com", "tags": ["Exploit"], "url": "http://openwall.com/lists/oss-security/2011/06/01/9"}, {"source": "secalert@redhat.com", "url": "http://secunia.com/advisories/44449"}, {"source": "secalert@redhat.com", "tags": ["Patch"], "url": "http://www.wireshark.org/docs/relnotes/wireshark-1.4.6.html"}, {"source": "secalert@redhat.com", "tags": ["Patch"], "url": "http://www.wireshark.org/news/20110418.html"}, {"source": "secalert@redhat.com", "tags": ["Exploit"], "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5837"}, {"source": "secalert@redhat.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67789"}, {"source": "secalert@redhat.com", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14943"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://openwall.com/lists/oss-security/2011/05/31/19"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://openwall.com/lists/oss-security/2011/06/01/9"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/44449"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.wireshark.org/docs/relnotes/wireshark-1.4.6.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.wireshark.org/news/20110418.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5837"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67789"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14943"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}