CVE-2011-1590: The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize...

Security readout for executives and security teams

CVE-2011-1590 is a denial-of-service flaw in older Wireshark releases. A malicious packet-capture file can crash the application when processed, disrupting analysts or workflows that inspect untrusted captures. The supplied sources do not show code execution or confirmed active exploitation. Exposure is mainly packet-analysis workstations or operational processes that use affected Wireshark versions to open untrusted .pcap files. Modern installations are likely unaffected if updated beyond 1.2.16 or 1.4.5. Treat as a targeted availability risk for teams handling packet captures. Prioritize remediation where legacy Wireshark is used in SOC, incident response, malware analysis, or customer-supplied evidence workflows. Mitigation focus: Upgrade Wireshark to 1.2.16, 1.4.5, or later supported versions.; Apply relevant operating-system vendor security updates where Wireshark is packaged.; Avoid opening untrusted packet captures on legacy Wireshark installations..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.