CVE-2012-2394
CVE-2012-2394
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
EPSS 3.9% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:015
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=42393
- http://www.securitytracker.com/id?1027094
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:042
- http://www.wireshark.org/security/wnpa-sec-2012-10.html
- http://secunia.com/advisories/49226
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7221
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:080
- http://www.securityfocus.com/bid/53653
- https://nvd.nist.gov/vuln/detail/CVE-2012-2394