CVE-2012-0067

Published: Apr 11, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

Affected (17)

Products: Wireshark: Wireshark · Redhat: Enterprise Linux

1 product

1 product

Enterprise Linux

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.6.0
Wireshark Wireshark	Version 1.6.1
Wireshark Wireshark	Version 1.6.2
Wireshark Wireshark	Version 1.6.3
Wireshark Wireshark	Version 1.6.4

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.4.0
Wireshark Wireshark	Version 1.4.10
Wireshark Wireshark	Version 1.4.1
Wireshark Wireshark	Version 1.4.2
Wireshark Wireshark	Version 1.4.3
Wireshark Wireshark	Version 1.4.4
Wireshark Wireshark	Version 1.4.5
Wireshark Wireshark	Version 1.4.6
Wireshark Wireshark	Version 1.4.7
Wireshark Wireshark	Version 1.4.8
Wireshark Wireshark	Version 1.4.9

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (22)

http://anonsvn.wireshark.org/viewvc?view=revision&revision=40167

Source: secalert@redhat.com

Patch

http://rhn.redhat.com/errata/RHSA-2013-0125.html

Source: secalert@redhat.com

http://secunia.com/advisories/47494

Source: secalert@redhat.com

http://secunia.com/advisories/48947

Source: secalert@redhat.com

http://secunia.com/advisories/54425

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/01/11/7

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/01/20/4

Source: secalert@redhat.com

http://www.wireshark.org/security/wnpa-sec-2012-01.html

Source: secalert@redhat.com

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6668

Source: secalert@redhat.com

ExploitPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15192

Source: secalert@redhat.com

http://anonsvn.wireshark.org/viewvc?view=revision&revision=40167

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://rhn.redhat.com/errata/RHSA-2013-0125.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/47494

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/48947

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/54425

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/01/11/7

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/01/20/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2012-01.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6668

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15192

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.