CVE-2011-1956
The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows...
The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.
Exploit likelihood
What each source reports
NVD Score used
The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.
- Record
CVE-2011-1956- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.
- Record
CVE-2011-1956- Updated
- 2026-11-02
EUVDEUVD-2011-1950 No score
The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.
- Record
EUVD-2011-1950- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hqw9-f827-9xw8 No score
The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows...
The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.
- Record
GHSA-hqw9-f827-9xw8- Updated
- 2026-11-02
OSV No score
The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.
- Record
CVE-2011-1956- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-1956 No score
The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.
- Record
DEBIAN-CVE-2011-1956- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Wireshark 1.4.5 - 'bytes_repr_len()' Null Pointer Dereference Denial of Service | 2011-06-17 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1956 is a medium vulnerability (CVSS 4.3) in Wireshark, published June 6, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.85%, the 93rd percentile. Fixed in wireshark 1.4.6-1.