Candidate: CVE-2011-1140 PublicDate: 2011-03-03 01:00:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1140 Description: Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service (infinite recursion) via a crafted (1) SMB or (2) Connection-less LDAP (CLDAP) packet. Ubuntu-Description: Notes: Bugs: https://bugs.edge.launchpad.net/ubuntu/+source/wireshark/+bug/730410 Priority: low Discovered-by: Assigned-to: CVSS: Patches_wireshark: upstream_wireshark: released (1.4.4) dapper_wireshark: DNE hardy_wireshark: ignored (reached end-of-life) karmic_wireshark: ignored (reached end-of-life) lucid_wireshark: ignored (reached end-of-life) maverick_wireshark: released (1.2.11-6+squeeze1build0.10.10.1) natty_wireshark: not-affected (1.4.4-1) oneiric_wireshark: not-affected (1.4.4-1) precise_wireshark: not-affected (1.4.4-1) quantal_wireshark: not-affected (1.4.4-1) raring_wireshark: not-affected (1.4.4-1) saucy_wireshark: not-affected (1.4.4-1) devel_wireshark: not-affected (1.4.4-1)