CVE-2011-1591: wireshark

CVSS: 9.3v2.0HighModified

AliasesDEBIAN-CVE-2011-1591

Published 29-04-2011Last modified 06-08-2024

Vulnerability summary

CVE-2011-1591 is a high (CVSS 9.3) vulnerability in wireshark. EPSS estimates a 41.74% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities. 8 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

41.74%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits8reference, exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2024:10199-1

Timeline

29-04-2011
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

41.74%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 41.74% on 18-09-2026

18-09-202618-10-2026

EPSS score

41.74%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

8 found

referenceUnverified
Exploit Reference (bugs.wireshark.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugs.wireshark.org)
Maturity: unknown
exploit-databaseremotelinuxUnverified
Wireshark 1.4.4 - DECT Dissector Remote Buffer Overflow
Maturity: poc

Show all 8 exploits

exploit-databaselocalwindowsVerified
Wireshark 1.4.1 < 1.4.4 - Local Overflow (SEH)
Maturity: weaponized
exploit-databaselocalwindowsVerified
Wireshark 1.4.4 - 'packet-dect.c' Local Stack Buffer Overflow (Metasploit) (1)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Wireshark 1.4.4 - 'packet-dect.c' Remote Stack Buffer Overflow (Metasploit) (2)
Maturity: weaponized
MetasploitremoteVerified
Wireshark packet-dect.c Stack Buffer Overflow (local)
exploit/windows/fileformat/wireshark_packet_dect
Maturity: weaponized
MetasploitremoteVerified
Wireshark packet-dect.c Stack Buffer Overflow
exploit/windows/misc/wireshark_packet_dect
Maturity: weaponized