CVE Vulnerabilities

CVE-2012-4285

Published: Aug 16, 2012 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
3.3 LOW
AV:A/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
4.3 LOW
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
LOW

The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a zero-length message.

Affected Software

Name Vendor Start Version End Version
Opensuse Opensuse 11.4 (including) 11.4 (including)
Opensuse Opensuse 12.1 (including) 12.1 (including)
Enterprise_linux Redhat 5 (including) 5 (including)
Sunos Sun 5.11 (including) 5.11 (including)
Red Hat Enterprise Linux 5 RedHat wireshark-0:1.0.15-5.el5 *
Red Hat Enterprise Linux 6 RedHat wireshark-0:1.8.10-4.el6 *
Wireshark Ubuntu hardy *
Wireshark Ubuntu natty *
Wireshark Ubuntu oneiric *
Wireshark Ubuntu precise *
Wireshark Ubuntu quantal *
Wireshark Ubuntu raring *
Wireshark Ubuntu saucy *
Wireshark Ubuntu upstream *

References