CVE-2011-1935 Information disclosure in n/a

What is CVE-2011-1935?

CVE-2011-1935 is a critical vulnerability in n/a, published on 20 Oct 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets.

Which versions are affected by CVE-2011-1935?

It affects 1 product.

Products include Tcpdump Libpcap.

How do I fix CVE-2011-1935?

Apply the vendor's patch.

Is CVE-2011-1935 being exploited?

There is no known exploitation of CVE-2011-1935 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2019-15163 Null dereference in n/a High 7.5
• CVE-2019-15161 Integer overflow in n/a Medium 5.3
• CVE-2019-15162 Information disclosure in n/a Medium 5.3
• CVE-2019-15164 Server-side request forgery in n/a Medium 5.3
• CVE-2023-7256 Double-free in libpcap before 1.10.5 with remote packet capture support. Medium 4.4

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2011-1935, GHSA-9x67-6959-6grf.