CVE-2012-2392

low
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors.

References

http://secunia.com/advisories/49226

http://www.mandriva.com/security/advisories?name=MDVSA-2012:015

http://www.mandriva.com/security/advisories?name=MDVSA-2012:042

http://www.mandriva.com/security/advisories?name=MDVSA-2012:080

http://www.securitytracker.com/id?1027094

http://www.wireshark.org/security/wnpa-sec-2012-08.html

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6805

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7118

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7119

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7120

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7124

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15604

Details

Source: MITRE

Published: 2012-06-30

Updated: 2017-09-19

Type: CWE-399

Risk Information

CVSS v2

Base Score: 3.3

Vector: AV:A/AC:L/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 6.5

Severity: LOW

Tenable Plugins

View all (15 total)

IDNameProductFamilySeverity
80803Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark1)NessusSolaris Local Security Checks
low
79162CentOS 6 : wireshark (CESA-2013:1569)NessusCentOS Local Security Checks
high
74636openSUSE Security Update : wireshark (openSUSE-SU-2012:0657-1)NessusSuSE Local Security Checks
low
71301Scientific Linux Security Update : wireshark on SL6.x i386/x86_64 (20131121)NessusScientific Linux Local Security Checks
high
71268Amazon Linux AMI : wireshark (ALAS-2013-251)NessusAmazon Linux Local Security Checks
high
71105Oracle Linux 6 : wireshark (ELSA-2013-1569)NessusOracle Linux Local Security Checks
high
71005RHEL 6 : wireshark (RHSA-2013:1569)NessusRed Hat Local Security Checks
high
66069Mandriva Linux Security Advisory : wireshark (MDVSA-2013:055)NessusMandriva Local Security Checks
high
64230SuSE 11.1 Security Update : wireshark (SAT Patch Number 6381)NessusSuSE Local Security Checks
low
61953Mandriva Linux Security Advisory : wireshark (MDVSA-2012:080)NessusMandriva Local Security Checks
low
61943Mandriva Linux Security Advisory : wireshark (MDVSA-2012:015)NessusMandriva Local Security Checks
low
59940Fedora 16 : wireshark-1.6.8-1.fc16 (2012-10175)NessusFedora Local Security Checks
low
59723SuSE 10 Security Update : wireshark (ZYPP Patch Number 8168)NessusSuSE Local Security Checks
low
59240Wireshark 1.6.x < 1.6.8 Multiple Denial of Service VulnerabilitiesNessusWindows
low
59239Wireshark 1.4.x < 1.4.13 Multiple Denial of Service VulnerabilitiesNessusWindows
low