CVE-2011-1935

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-1935
pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://article.gmane.org/gmane.network.tcpdump.devel/4968 Broken Link Issue Tracking Third Party Advisory
http://thread.gmane.org/gmane.network.tcpdump.devel/5018 Broken Link Issue Tracking Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/05/19/11 Broken Link Issue Tracking Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/02/08/5 Mailing List Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1%3Bbug=623868%3Bfilename=0001-Fix-the-calculation-of-the-frame-size-in-memory-mapp.patch%3Bmsg=10
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=623868 Issue Tracking Patch Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-1935/ Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:tcpdump:libpcap:*:*:*:*:*:*:*:*
History

07 Nov 2023, 02:07

Type Values Removed Values Added
References
  • {'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=623868;filename=0001-Fix-the-calculation-of-the-frame-size-in-memory-mapp.patch;msg=10', 'name': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=623868;filename=0001-Fix-the-calculation-of-the-frame-size-in-memory-mapp.patch;msg=10', 'tags': ['Issue Tracking', 'Patch', 'Third Party Advisory'], 'refsource': 'MISC'}
  • () https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1%3Bbug=623868%3Bfilename=0001-Fix-the-calculation-of-the-frame-size-in-memory-mapp.patch%3Bmsg=10 -

15 Jun 2021, 14:44

Type Values Removed Values Added
References (CONFIRM) http://thread.gmane.org/gmane.network.tcpdump.devel/5018 - Issue Tracking, Patch, Third Party Advisory (CONFIRM) http://thread.gmane.org/gmane.network.tcpdump.devel/5018 - Broken Link, Issue Tracking, Patch, Third Party Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2011/05/19/11 - Issue Tracking, Mailing List, Patch, Third Party Advisory (MLIST) http://www.openwall.com/lists/oss-security/2011/05/19/11 - Broken Link, Issue Tracking, Mailing List, Patch, Third Party Advisory
References (MISC) http://article.gmane.org/gmane.network.tcpdump.devel/4968 - Issue Tracking, Third Party Advisory (MISC) http://article.gmane.org/gmane.network.tcpdump.devel/4968 - Broken Link, Issue Tracking, Third Party Advisory
CWE CWE-19 NVD-CWE-noinfo
CPE cpe:2.3:a:debain:libpcap:*:*:*:*:*:*:*:* cpe:2.3:a:tcpdump:libpcap:*:*:*:*:*:*:*:*
Information

Published : 2017-10-20 18:29

Updated : 2023-12-10 12:15

NVD link : CVE-2011-1935

Mitre link : CVE-2011-1935

CVE.ORG link : CVE-2011-1935

JSON object : View

Products Affected

tcpdump

  • libpcap
CWE
NVD-CWE-noinfo