Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2012-4287

Published: 16/08/2012 Updated: 19/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Sunos

Vulnerability Summary

epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x prior to 1.8.2 allows remote malicious users to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.

Vulnerable Product Search on Vulmon Subscribe to Product

sun sunos 5.11

wireshark wireshark 1.8.1

wireshark wireshark 1.8.0

Vendor Advisories

Debian CVElist Bug Report Logs: wireshark: CVE-2012-4048: PPP dissector crash/segfault
Debian Bug report logs - #680056 wireshark: CVE-2012-4048: PPP dissector crash/segfault Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Bjørn Mork <bjorn@morkno> Date: Tue, 3 Jul 2012 08:36:02 UTC Severi ...
Debian CVElist Bug Report Logs: wireshark: Multiple security issues in 1.12.2 and prior versions
Debian Bug report logs - #776135 wireshark: Multiple security issues in 1122 and prior versions Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: balint@balintreczeyhu Date: Sat, 24 Jan 2015 10:51:01 UTC Severity: ...
Debian CVElist Bug Report Logs: CVE-2015-2187 CVE-2015-2188 CVE-2015-2189 CVE-2015-2190 CVE-2015-2191 CVE-2015-2192
Debian Bug report logs - #780372 CVE-2015-2187 CVE-2015-2188 CVE-2015-2189 CVE-2015-2190 CVE-2015-2191 CVE-2015-2192 Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Th ...

References

CWE-399http://www.wireshark.org/security/wnpa-sec-2012-14.htmlhttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7572http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mongo.c?r1=44288&r2=44287&pathrev=44288http://anonsvn.wireshark.org/viewvc?view=revision&revision=44288https://hermes.opensuse.org/messages/15514562http://www.securityfocus.com/bid/55035https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3http://secunia.com/advisories/51363http://www.gentoo.org/security/en/glsa/glsa-201308-05.xmlhttp://secunia.com/advisories/54425http://secunia.com/advisories/50276https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15818https://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=680056
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3400CVE-2023-7252CVE-2024-21111denial of serviceCVE-2024-29661CVE-2024-22856remote attackersencryptionCVE-2023-38299
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook