PT-2012-5324 · Wireshark · Wireshark

Laurent Butti · Published 2012-08-16 · Updated 2024-06-15 · CVE-2012-4297

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.9 Wireshark versions 1.8.x through 1.8.1

Description A buffer overflow issue exists in the dissect gsm rlcmac downlink function in the GSM RLC MAC dissector, allowing remote attackers to execute arbitrary code via a malformed packet.

Recommendations For Wireshark versions 1.6.x through 1.6.9, update to version 1.6.10 or later. For Wireshark versions 1.8.x through 1.8.1, update to version 1.8.2 or later.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-4297

OPENSUSE-SU-2024:10199-1

Affected Products

Wireshark

References · 282

• https://hermes.opensuse.org/messages/15514562 · Vendor Advisory
• https://ubuntu.com/security/CVE-2012-4297 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-4297 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-201308-05.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-4297 · Vendor Advisory
• http://wireshark.org/security/wnpa-sec-2012-19.html · Vendor Advisory
• http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&r2=44306&pathrev=44307 · Patch
• http://anonsvn.wireshark.org/viewvc?view=revision&revision=44307 · Patch
• https://cve.org/CVERecord?id=CVE-2012-4297 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-4297 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-4297 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-4297 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10199-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2015-6243 · Note
• https://suse.com/security/cve/CVE-2014-6428 · Note