Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2011-1935

Good to know:

icon

Date: October 20, 2017

pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets.

Language: C

Severity Score

Related Resources (9)

http://thread.gmane.org/gmane.network.tcpdump.devel/5018
https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1%3Bbug=623868%3Bfilename=0001-Fix-the-calculation-of-the-frame-size-in-memory-mapp.patch%3Bmsg=10
http://www.openwall.com/lists/oss-security/2011/05/19/11
http://www.openwall.com/lists/oss-security/2014/02/08/5
https://nvd.nist.gov/vuln/detail/CVE-2011-1935
http://article.gmane.org/gmane.network.tcpdump.devel/4968
https://security-tracker.debian.org/tracker/CVE-2011-1935/
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=623868
https://www.mend.io/vulnerability-database/CVE-2011-1935

Severity Score

Weakness Type (CWE)

Data Handling

CWE-19

Insufficient Information

NVD-CWE-noinfo

Top Fix

icon

Upgrade Version

Upgrade to version libpcap-1.2.1

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us