CVE-2011-2174: wireshark Resource Management Errors

CVSS: 4.3v2.0MediumModified

AliasesDEBIAN-CVE-2011-2174

Published 06-06-2011Last modified 06-08-2024

Vulnerability summary

CVE-2011-2174 is a medium (CVSS 4.3) Resource Management Errors vulnerability in wireshark. EPSS estimates a 1.97% chance of exploitation in the next 30 days, higher than 80% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

1.97%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 3 · Related 1

DSA-2274-1 OPENSUSE-SU-2024:10199-1 RHSA-2012:0509

Timeline

06-06-2011
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a packet with malformed data that uses zlib compression.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

1.97%

Chance of exploitation in the next 30 days

Percentile

80%

Versus all other CVEs

30-day change

0.00 pp

From 1.97% on 18-09-2026

18-09-202618-10-2026

EPSS score

1.97%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (bugs.wireshark.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-399Resource Management ErrorsWeaknesses in this category are related to improper management of system resources.

Affected systems

Debian1 product

wireshark< 1.6.0-1

Wireshark1 product

wiresharkEOL1.2 | 1.2.0 | 1.2.1 | 1.2.2 | 1.2.3 | 1.2.4 | 1.2.5 | 1.2.6 | 1.2.7 | 1.2.8 | 1.2.9 | 1.2.10 | 1.2.11 | 1.2.12 | 1.2.13 | 1.2.14 | 1.2.15 | 1.2.16 | 1.4.0 | 1.4.1 | 1.4.2 | 1.4.3 | 1.4.4 | 1.4.5 | 1.4.6

2 vendors · 2 products

References

20 links

secunia.com/advisories/44958Third Party AdvisoryX Refsource SECUNIA
lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.htmlVendor AdvisoryX Refsource FEDORA
bugzilla.redhat.com/show_bug.cgi?id=710097X Refsource CONFIRMPatch
www.wireshark.org/security/wnpa-sec-2011-07.htmlX Refsource CONFIRMPatchVendor Advisory
bugs.wireshark.org/bugzilla/show_bug.cgi?id=5908X Refsource CONFIRMExploitPatch
secunia.com/advisories/48947Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/48066VDB EntryX Refsource BID
www.wireshark.org/security/wnpa-sec-2011-08.htmlX Refsource CONFIRMPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14777VDB EntrySignatureX Refsource OVAL
www.debian.org/security/2011/dsa-2274Vendor AdvisoryX Refsource DEBIAN

Show all 20 references

secunia.com/advisories/44449Third Party AdvisoryX Refsource SECUNIA
anonsvn.wireshark.org/viewvc?view=revision&revision=37081X Refsource CONFIRMPatch
openwall.com/lists/oss-security/2011/06/01/11Mailing ListX Refsource MLIST
openwall.com/lists/oss-security/2011/06/01/1Mailing ListX Refsource MLIST
lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.htmlVendor AdvisoryX Refsource FEDORA
exchange.xforce.ibmcloud.com/vulnerabilities/67793VDB EntryX Refsource XF
openwall.com/lists/oss-security/2011/05/31/20Mailing ListX Refsource MLIST
lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/45149Third Party AdvisoryX Refsource SECUNIA
security-tracker.debian.org/tracker/CVE-2011-2174Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities