CVE-2011-1935

Name	CVE-2011-1935
Description	pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
Debian Bugs	623868

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libpcap (PTS)	stretch	1.8.1-3	fixed
	stretch (security)	1.8.1-3+deb9u1	fixed
	buster	1.8.1-6+deb10u1	fixed
	bullseye	1.10.0-2	fixed
	bookworm, sid	1.10.1-4	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Debian Bugs
libpcap	source	lenny	(not affected)
libpcap	source	squeeze	1.1.1-2+squeeze1
libpcap	source	(unstable)	1.1.1-4	low	623868

<878vsbyviu.fsf@silenus.orebokech.com>