CVE-2011-1143 : Detail

CVE-2011-1143

0.98%V3
Network
2011-03-02
23h00 +00:00
2017-09-18
10h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted .pcap file.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Exploit information

Exploit Database EDB-ID : 35432

Publication date : 2011-02-28
23h00 +00:00
Author : Buildbot Builder
EDB Verified : Yes

source: https://www.securityfocus.com/bid/46796/info Wireshark is prone to a remote denial-of-service vulnerability caused by a NULL-pointer dereference error. An attacker can exploit this issue to crash the application, resulting in a denial-of-service condition. https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/35432.pcap

Products Mentioned

Configuraton 0

Wireshark>>Wireshark >> Version To (including) 1.4.3

Wireshark>>Wireshark >> Version 0.99.2

Wireshark>>Wireshark >> Version 0.99.3

Wireshark>>Wireshark >> Version 0.99.4

Wireshark>>Wireshark >> Version 0.99.5

Wireshark>>Wireshark >> Version 0.99.6

Wireshark>>Wireshark >> Version 0.99.7

Wireshark>>Wireshark >> Version 0.99.8

Wireshark>>Wireshark >> Version 1.0.0

Wireshark>>Wireshark >> Version 1.0.1

Wireshark>>Wireshark >> Version 1.0.2

Wireshark>>Wireshark >> Version 1.0.3

Wireshark>>Wireshark >> Version 1.0.4

Wireshark>>Wireshark >> Version 1.0.5

Wireshark>>Wireshark >> Version 1.0.6

Wireshark>>Wireshark >> Version 1.0.7

Wireshark>>Wireshark >> Version 1.0.8

Wireshark>>Wireshark >> Version 1.0.9

Wireshark>>Wireshark >> Version 1.0.10

Wireshark>>Wireshark >> Version 1.0.11

Wireshark>>Wireshark >> Version 1.0.12

Wireshark>>Wireshark >> Version 1.0.13

Wireshark>>Wireshark >> Version 1.0.14

Wireshark>>Wireshark >> Version 1.0.15

Wireshark>>Wireshark >> Version 1.0.16

Wireshark>>Wireshark >> Version 1.2

    Wireshark>>Wireshark >> Version 1.2.0

    Wireshark>>Wireshark >> Version 1.2.1

    Wireshark>>Wireshark >> Version 1.2.2

    Wireshark>>Wireshark >> Version 1.2.3

    Wireshark>>Wireshark >> Version 1.2.4

    Wireshark>>Wireshark >> Version 1.2.5

    Wireshark>>Wireshark >> Version 1.2.6

    Wireshark>>Wireshark >> Version 1.2.7

    Wireshark>>Wireshark >> Version 1.2.8

    Wireshark>>Wireshark >> Version 1.2.9

    Wireshark>>Wireshark >> Version 1.2.10

    Wireshark>>Wireshark >> Version 1.2.11

    Wireshark>>Wireshark >> Version 1.2.12

    Wireshark>>Wireshark >> Version 1.2.13

    Wireshark>>Wireshark >> Version 1.2.14

    Wireshark>>Wireshark >> Version 1.2.15

    Wireshark>>Wireshark >> Version 1.4.0

    Wireshark>>Wireshark >> Version 1.4.1

    Wireshark>>Wireshark >> Version 1.4.2

    References

    https://hermes.opensuse.org/messages/8086844
    Tags : vendor-advisory, x_refsource_SUSE
    http://secunia.com/advisories/43759
    Tags : third-party-advisory, x_refsource_SECUNIA
    http://secunia.com/advisories/44169
    Tags : third-party-advisory, x_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2011/0626
    Tags : vdb-entry, x_refsource_VUPEN
    http://secunia.com/advisories/48947
    Tags : third-party-advisory, x_refsource_SECUNIA
    http://www.kb.cert.org/vuls/id/215900
    Tags : third-party-advisory, x_refsource_CERT-VN
    http://www.redhat.com/support/errata/RHSA-2011-0370.html
    Tags : vendor-advisory, x_refsource_REDHAT
    http://www.vupen.com/english/advisories/2011/0719
    Tags : vdb-entry, x_refsource_VUPEN
    http://www.securityfocus.com/bid/46796
    Tags : vdb-entry, x_refsource_BID
    http://www.securitytracker.com/id?1025148
    Tags : vdb-entry, x_refsource_SECTRACK
    http://secunia.com/advisories/43821
    Tags : third-party-advisory, x_refsource_SECUNIA