CVE-2011-1959

Name	CVE-2011-1959
Description	The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-2274-1
Debian Bugs	630159

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
wireshark (PTS)	bookworm, bookworm (security)	4.0.17-0+deb12u3	fixed
	trixie	4.4.16-0+deb13u1	fixed
	trixie (security)	4.4.18-0+deb13u1	fixed
	forky	4.6.6-1	fixed
	sid	4.6.6-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
wireshark	source	lenny	1.0.2-3+lenny14		DSA-2274-1
wireshark	source	squeeze	1.2.11-6+squeeze2		DSA-2274-1
wireshark	source	(unstable)	1.6.0-1	unimportant		630159

Crashes w/o code injection not treated as security issues, see README.Security