CVE-2011-0538

Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed file.

• CWE-119

• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html
• http://openwall.com/lists/oss-security/2011/02/04/1Patch
• http://secunia.com/advisories/43759Vendor Advisory
• http://secunia.com/advisories/43795Vendor Advisory
• http://secunia.com/advisories/43821Vendor Advisory
• http://www.debian.org/security/2011/dsa-2201
• http://www.kb.cert.org/vuls/id/215900US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:044
• http://www.redhat.com/support/errata/RHSA-2011-0369.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0370.htmlVendor Advisory
• http://www.securityfocus.com/bid/46167Exploit
• http://www.securitytracker.com/id?1025148
• http://www.vupen.com/english/advisories/2011/0622Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0626Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0719Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0747Vendor Advisory
• http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html
• http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html
• http://www.wireshark.org/security/wnpa-sec-2011-03.html
• http://www.wireshark.org/security/wnpa-sec-2011-04.html
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5652Exploit, Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=676232
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65182
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14605
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html
• http://openwall.com/lists/oss-security/2011/02/04/1Patch
• http://secunia.com/advisories/43759Vendor Advisory
• http://secunia.com/advisories/43795Vendor Advisory
• http://secunia.com/advisories/43821Vendor Advisory
• http://www.debian.org/security/2011/dsa-2201
• http://www.kb.cert.org/vuls/id/215900US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:044
• http://www.redhat.com/support/errata/RHSA-2011-0369.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0370.htmlVendor Advisory
• http://www.securityfocus.com/bid/46167Exploit
• http://www.securitytracker.com/id?1025148
• http://www.vupen.com/english/advisories/2011/0622Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0626Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0719Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0747Vendor Advisory
• http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html
• http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html
• http://www.wireshark.org/security/wnpa-sec-2011-03.html
• http://www.wireshark.org/security/wnpa-sec-2011-04.html
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5652Exploit, Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=676232
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65182
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14605

Published

Feb 8, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0532The (1) backup and restore scripts, (2) main initialization …
• CVE-2011-0533Cross-site scripting (XSS) vulnerability in Apache Continuum…
• CVE-2011-0534Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 d…
• CVE-2011-0535Cross-site request forgery (CSRF) vulnerability in the Users…
• CVE-2011-0536Multiple untrusted search path vulnerabilities in elf/dl-obj…
• CVE-2011-0537Multiple directory traversal vulnerabilities in (1) language…
• CVE-2011-0539The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6…7.5
• CVE-2011-0540Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2011-0541fuse 2.8.5 and earlier does not properly handle when /etc/mt…
• CVE-2011-0542fusermount in fuse 2.8.5 and earlier does not perform a chdi…
• CVE-2011-0543Certain legacy functionality in fusermount in fuse 2.8.5 and…
• CVE-2011-0544phpbb 3.0.x-3.0.6 has an XSS vulnerability via the [flash] B…6.1