CVE-2011-1140: Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string f...

Security readout for executives and security teams

CVE-2011-1140 is a denial-of-service flaw in older Wireshark versions. A malicious SMB or CLDAP packet can make Wireshark recurse indefinitely while dissecting protocol strings, exhausting stack resources and crashing analysis. It affects packet-analysis workstations or systems that automatically process captures, not the underlying SMB or LDAP services themselves. Exposure is most likely on hosts running affected Wireshark versions or automated capture-processing pipelines that ingest untrusted network traffic or packet captures containing SMB or CLDAP packets. Treat as a targeted reliability risk for security operations tooling. It is not evidenced as actively exploited or data-compromising, but affected Wireshark instances handling untrusted traffic can be disrupted and should be updated during normal vulnerability remediation. Mitigation focus: Upgrade affected Wireshark installations using vendor guidance and fixed release notes.; Prioritize systems that open untrusted packet captures or monitor hostile networks.; Restrict automated capture processing to trusted inputs until updated..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.