Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2012-6057

Published: 05/12/2012 Updated: 19/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Wireshark

Vulnerability Summary

The dissect_eigrp_metric_comm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x prior to 1.8.4 uses the wrong data type for a certain offset value, which allows remote malicious users to cause a denial of service (integer overflow and infinite loop) via a malformed packet.

Vulnerable Product Search on Vulmon Subscribe to Product

wireshark wireshark 1.8.0

wireshark wireshark 1.8.3

wireshark wireshark 1.8.1

wireshark wireshark 1.8.2

References

CWE-189http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-eigrp.c?r1=45408&r2=45407&pathrev=45408http://anonsvn.wireshark.org/viewvc?view=revision&revision=45408http://www.wireshark.org/security/wnpa-sec-2012-34.htmlhttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7800http://lists.opensuse.org/opensuse-updates/2013-01/msg00042.htmlhttp://lists.opensuse.org/opensuse-updates/2012-12/msg00022.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15883https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21987buffer overflowCVE-2024-28890CVE-2024-27574CVE-2024-27347CVE-2024-31450privilegeSSTICVE-2024-31666
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook