CVE-2011-1935

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://article.gmane.org/gmane.network.tcpdump.devel/4968Broken Link, Issue Tracking, Third Party Advisory
http://thread.gmane.org/gmane.network.tcpdump.devel/5018Broken Link, Issue Tracking, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/05/19/11Broken Link, Issue Tracking, Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/02/08/5Mailing List, Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1%3Bbug=623868%3Bfilename=0001-Fix-the-calculation-of-the-frame-size-in-memory-mapp.patch%3Bmsg=10
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=623868Issue Tracking, Patch, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-1935/Issue Tracking, Third Party Advisory
http://article.gmane.org/gmane.network.tcpdump.devel/4968Broken Link, Issue Tracking, Third Party Advisory
http://thread.gmane.org/gmane.network.tcpdump.devel/5018Broken Link, Issue Tracking, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/05/19/11Broken Link, Issue Tracking, Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/02/08/5Mailing List, Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1%3Bbug=623868%3Bfilename=0001-Fix-the-calculation-of-the-frame-size-in-memory-mapp.patch%3Bmsg=10
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=623868Issue Tracking, Patch, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-1935/Issue Tracking, Third Party Advisory

Timeline

Published: Oct 20, 2017
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-19364.6Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation w CVE-2011-19374.3Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn co CVE-2011-19387.5Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent CVE-2011-19399.8SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in con CVE-2011-19404.3Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inj CVE-2011-19414.3Open redirect vulnerability in the redirector feature in phpMyAdmin 3.4.x before 3.4.1 allows remote attackers to redirect users to arbitrar CVE-2011-19432.1The destroy_one_secret function in nm-setting-vpn.c in libnm-util in the NetworkManager package 0.8.999-3.git20110526 in Fedora 15 creates a CVE-2011-19449.3Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent CVE-2011-19452.6The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) i CVE-2011-19467.2gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setu CVE-2011-19475.0fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote s CVE-2011-19484.3Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a craft