CVE-2012-0042

Published: Apr 11, 2012Modified: Apr 29, 2026

2.9

Vector

AV:A/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 5.5 / Impact: 2.9

Source: NVD

Description

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet, related to epan/to_str.c.

Affected (17)

Products: Wireshark: Wireshark · Redhat: Enterprise Linux

1 product

1 product

Enterprise Linux

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.6.0
Wireshark Wireshark	Version 1.6.1
Wireshark Wireshark	Version 1.6.2
Wireshark Wireshark	Version 1.6.3
Wireshark Wireshark	Version 1.6.4

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5

Configuration C

11 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.4.0
Wireshark Wireshark	Version 1.4.10
Wireshark Wireshark	Version 1.4.1
Wireshark Wireshark	Version 1.4.2
Wireshark Wireshark	Version 1.4.3
Wireshark Wireshark	Version 1.4.4
Wireshark Wireshark	Version 1.4.5
Wireshark Wireshark	Version 1.4.6
Wireshark Wireshark	Version 1.4.7
Wireshark Wireshark	Version 1.4.8
Wireshark Wireshark	Version 1.4.9

References (22)

http://anonsvn.wireshark.org/viewvc?view=revision&revision=40194

Source: secalert@redhat.com

Patch

http://rhn.redhat.com/errata/RHSA-2013-0125.html

Source: secalert@redhat.com

http://secunia.com/advisories/47494

Source: secalert@redhat.com

http://secunia.com/advisories/48947

Source: secalert@redhat.com

http://secunia.com/advisories/54425

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/01/11/7

Source: secalert@redhat.com

http://www.securitytracker.com/id?1026507

Source: secalert@redhat.com

http://www.wireshark.org/security/wnpa-sec-2012-02.html

Source: secalert@redhat.com

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6634

Source: secalert@redhat.com

ExploitPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15368

Source: secalert@redhat.com

http://anonsvn.wireshark.org/viewvc?view=revision&revision=40194

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://rhn.redhat.com/errata/RHSA-2013-0125.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/47494

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/48947

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/54425

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/01/11/7

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1026507

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2012-02.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6634

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15368

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.