Published: 11/04/2012 Updated: 13/02/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

wiretap/iptrace.c in Wireshark 1.4.x prior to 1.4.11 and 1.6.x prior to 1.6.5 allows remote malicious users to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 1.6.0
wireshark wireshark 1.6.4
wireshark wireshark 1.6.3
wireshark wireshark 1.6.1
wireshark wireshark 1.6.2
wireshark wireshark 1.4.7
wireshark wireshark 1.4.2
wireshark wireshark 1.4.0
wireshark wireshark 1.4.5
wireshark wireshark 1.4.4
wireshark wireshark 1.4.10
wireshark wireshark 1.4.9
wireshark wireshark 1.4.6
wireshark wireshark 1.4.3
wireshark wireshark 1.4.1
wireshark wireshark 1.4.8
redhat enterprise linux 5

Synopsis Moderate: wireshark security update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerab ...

Synopsis Moderate: wireshark security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix several security issues, three bugs,and add one enhancement are now available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated ...

Laurent Butti discovered a buffer underflow in the LANalyzer dissector of the Wireshark network traffic analyzer, which could lead to the execution of arbitrary code (CVE-2012-0068) This update also addresses several bugs, which can lead to crashes of Wireshark These are not treated as security issues, but are fixed nonetheless if security updat ...

source: wwwsecurityfocuscom/bid/51710/info Wireshark is prone to a buffer-underflow vulnerability and multiple denial-of-service vulnerabilities Remote attackers can exploit these issues to execute arbitrary code in the context of the application or cause denial-of-service conditions Wireshark versions 140 through 1410 and 160 t ...

CWE-20 http://anonsvn.wireshark.org/viewvc?view=revision&revision=40167 http://www.openwall.com/lists/oss-security/2012/01/20/4 http://www.wireshark.org/security/wnpa-sec-2012-01.html http://www.openwall.com/lists/oss-security/2012/01/11/7 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6668 http://secunia.com/advisories/48947 http://rhn.redhat.com/errata/RHSA-2013-0125.html http://secunia.com/advisories/47494 http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml http://secunia.com/advisories/54425 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15192 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2012:0509 https://www.exploit-db.com/exploits/36633/https://www.debian.org/security/./dsa-2395

CVE-2012-0067

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect