Vulnerability Details : CVE-2012-2392
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors.
Vulnerability category: Denial of service
Products affected by CVE-2012-2392
- cpe:2.3:a:wireshark:wireshark:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.9:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.10:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.11:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.12:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.13:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.7:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-2392
0.15%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 50 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-2392
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
3.3
|
LOW | AV:A/AC:L/Au:N/C:N/I:N/A:P |
6.5
|
2.9
|
NIST |
CWE ids for CVE-2012-2392
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-2392
-
http://www.mandriva.com/security/advisories?name=MDVSA-2012:042
mandriva.com
-
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7120
7120 – ASF infinite loop
-
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6805
6805 – 802.11 packet capture infinite loop
-
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7118
7118 – 802.3 infinite loop
-
http://www.securitytracker.com/id?1027094
Wireshark Multiple Bugs Let Remote Users Deny Service - SecurityTracker
-
http://www.mandriva.com/security/advisories?name=MDVSA-2012:015
mandriva.com
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15604
Repository / Oval Repository
-
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7119
7119 – ANSIMAP infinite loop
-
http://www.mandriva.com/security/advisories?name=MDVSA-2012:080
mandriva.com
-
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7124
7124 – LTP infinite loop
-
http://www.wireshark.org/security/wnpa-sec-2012-08.html
Wireshark · wnpa-sec-2012-08 · Infinite and large loops in many dissectorsVendor Advisory
Jump to