CVE-2012-4291
CVE-2012-4291
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
EPSS 1.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.securityfocus.com/bid/55035
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15813
- http://secunia.com/advisories/54425
- http://rhn.redhat.com/errata/RHSA-2013-0125.html
- http://www.wireshark.org/security/wnpa-sec-2012-20.html
- https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3
- http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml
- http://secunia.com/advisories/51363
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7570
- http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html
- http://secunia.com/advisories/50276
- https://hermes.opensuse.org/messages/15514562
- https://nvd.nist.gov/vuln/detail/CVE-2012-4291