CVE-2011-2698 Integer overflow in n/a

What is CVE-2011-2698?

CVE-2011-2698 is a medium-severity vulnerability in Wireshark Wireshark, published on 23 Aug 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (infinite loop) via an invalid packet.

Weakness: CWE-189

Which versions are affected by CVE-2011-2698?

It affects 1 product.

Products include Wireshark Wireshark.

How do I fix CVE-2011-2698?

Upgrade to a fixed version.

Is CVE-2011-2698 being exploited?

There is no known exploitation of CVE-2011-2698 in the wild and no public exploit code.

Other vulnerabilities in Wireshark Wireshark

• CVE-2011-0444 Memory corruption in n/a Critical 10.0
• CVE-2010-2994 Memory corruption in n/a Critical 10.0
• CVE-2010-2995 Memory corruption in n/a Critical 10.0
• CVE-2009-1266 Other in n/a Critical 10.0
• CVE-2009-1210 Memory corruption in n/a Critical 10.0

All Wireshark Wireshark vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2011-2698, GHSA-4j9w-fggf-r5v6.