Published: 30/06/2012 Updated: 19/09/2017

CVSS v2 Base Score: 3.3 | Impact Score: 2.9 | Exploitability Score: 6.5

VMScore: 335

Vector: AV:A/AC:L/Au:N/C:N/I:N/A:P

Wireshark 1.4.x prior to 1.4.13 and 1.6.x prior to 1.6.8 allows remote malicious users to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 1.4.5
wireshark wireshark 1.4.7
wireshark wireshark 1.4.12
wireshark wireshark 1.4.13
wireshark wireshark 1.6.6
wireshark wireshark 1.6.7
wireshark wireshark 1.4.9
wireshark wireshark 1.4.3
wireshark wireshark 1.4.2
wireshark wireshark 1.4.11
wireshark wireshark 1.4.6
wireshark wireshark 1.4.0
wireshark wireshark 1.4.4
wireshark wireshark 1.6.4
wireshark wireshark 1.6.5
wireshark wireshark 1.4.1
wireshark wireshark 1.6.2
wireshark wireshark 1.6.3
wireshark wireshark 1.4.8
wireshark wireshark 1.4.10
wireshark wireshark 1.6.0
wireshark wireshark 1.6.1

Synopsis Moderate: wireshark security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix multiple security issues, several bugs,and add various enhancements are now available for Red Hat EnterpriseLinux 6The Red Hat Security Response Team ha ...

Two flaws were found in Wireshark If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark (CVE-2013-3559, CVE-2013-4083) Several denial of service flaws were found in Wireshark Wireshark could crash or stop responding if it read a malfor ...

source: wwwsecurityfocuscom/bid/53651/info Wireshark is prone to multiple denial-of-service vulnerabilities An attacker can exploit these issues to crash the affected application, denying service to legitimate users Wireshark versions 160 through 167 and versions 140 through 1412 are vulnerable PoC: githubcom/offe ...

CWE-399 http://www.wireshark.org/security/wnpa-sec-2012-08.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7119 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7120 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7124 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7118 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6805 http://www.mandriva.com/security/advisories?name=MDVSA-2012:042 http://www.mandriva.com/security/advisories?name=MDVSA-2012:015 http://www.mandriva.com/security/advisories?name=MDVSA-2012:080 http://secunia.com/advisories/49226 http://www.securitytracker.com/id?1027094 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15604 https://access.redhat.com/errata/RHSA-2013:1569 https://nvd.nist.gov https://www.exploit-db.com/exploits/18919/https://alas.aws.amazon.com/ALAS-2013-251.html

CVE-2012-2392

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect