PT-2012-5167 · Wireshark+1 · Wireshark+1

Philip Rowlands · Publicado 2012-07-24 · Atualizado 2024-06-15 · CVE-2012-4049

Positive Technologies (AI Summary)

CVSS v2.0

2.9

Baixa

Vetor base

AV:A/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.13 Wireshark versions 1.6.x through 1.6.8 Wireshark versions 1.8.x through 1.8.0

Description The issue allows remote attackers to cause a denial of service, resulting in loop and CPU consumption, via a crafted packet. This is related to the NFS dissector in Wireshark.

Recommendations For Wireshark versions 1.4.x through 1.4.13, update to version 1.4.14 or later. For Wireshark versions 1.6.x through 1.6.8, update to version 1.6.9 or later. For Wireshark versions 1.8.x through 1.8.0, update to version 1.8.1 or later.

Exploit

Correção

DoS

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2012-4049

OPENSUSE-SU-2024:10199-1

Produtos afetados

Suse

Wireshark

Referências · 281

• 🔥 http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-nfs.c?r1=43576&r2=43575&pathrev=43576 · Exploit
• https://suse.com/security/cve/CVE-2015-6243 · Nota
• https://suse.com/security/cve/CVE-2014-6428 · Nota
• https://suse.com/security/cve/CVE-2013-3558 · Nota
• https://suse.com/security/cve/CVE-2013-1576 · Nota
• https://suse.com/security/cve/CVE-2011-1140 · Nota
• https://suse.com/security/cve/CVE-2012-4298 · Nota
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7436 · Nota
• https://suse.com/security/cve/CVE-2013-4932 · Nota
• https://suse.com/security/cve/CVE-2011-3266 · Nota
• https://suse.com/security/cve/CVE-2011-1143 · Nota
• https://suse.com/security/cve/CVE-2014-2282 · Nota
• https://suse.com/security/cve/CVE-2014-8710 · Nota
• https://suse.com/security/cve/CVE-2012-4289 · Nota
• https://suse.com/security/cve/CVE-2016-6511 · Nota