CVE-2012-0068

Published: Apr 11, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The lanalyzer_read function in wiretap/lanalyzer.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a Novell capture file containing a record that is too small.

Affected (18)

Products: Wireshark: Wireshark

1 product

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.4.0
Wireshark Wireshark	Version 1.4.10
Wireshark Wireshark	Version 1.4.11
Wireshark Wireshark	Version 1.4.1
Wireshark Wireshark	Version 1.4.2
Wireshark Wireshark	Version 1.4.3
Wireshark Wireshark	Version 1.4.4
Wireshark Wireshark	Version 1.4.5
Wireshark Wireshark	Version 1.4.6
Wireshark Wireshark	Version 1.4.7
Wireshark Wireshark	Version 1.4.8
Wireshark Wireshark	Version 1.4.9

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.6.0
Wireshark Wireshark	Version 1.6.1
Wireshark Wireshark	Version 1.6.2
Wireshark Wireshark	Version 1.6.3
Wireshark Wireshark	Version 1.6.4
Wireshark Wireshark	Version 1.6.5

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (18)

http://anonsvn.wireshark.org/viewvc?view=revision&revision=40169

Source: secalert@redhat.com

http://secunia.com/advisories/47494

Source: secalert@redhat.com

http://secunia.com/advisories/54425

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/01/11/7

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/01/20/4

Source: secalert@redhat.com

http://www.wireshark.org/security/wnpa-sec-2012-01.html

Source: secalert@redhat.com

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6670

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15379

Source: secalert@redhat.com

http://anonsvn.wireshark.org/viewvc?view=revision&revision=40169

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/47494

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/54425

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/01/11/7

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/01/20/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2012-01.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6670

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15379

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.