CVE-2012-4287
published 2012-08-16CVE-2012-4287: epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU…
PriorityP420medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
2.45%
82.7th percentile
epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wireshark | < wireshark 1.8.2-1 (bookworm) | wireshark 1.8.2-1 (bookworm) |
| sun | sunos | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 0 < 1.8.2-1 | 1.8.2-1 |
| wireshark | wireshark | >= 0 < 1.8.2-1 | 1.8.2-1 |
| wireshark | wireshark | >= 0 < 1.8.2-1 | 1.8.2-1 |
| wireshark | wireshark | >= 0 < 1.8.2-1 | 1.8.2-1 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
wireshark: DoS via excessive CPU consumption in MongoDB dissector (wnpa-sec-2012-14)
vendor_redhat·2012-08-15·CVSS 5.0
CVE-2012-4287 [MEDIUM] wireshark: DoS via excessive CPU consumption in MongoDB dissector (wnpa-sec-2012-14)
wireshark: DoS via excessive CPU consumption in MongoDB dissector (wnpa-sec-2012-14)
epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.
Statement: This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 5 and 6.
Package: wireshark (Red Hat Enterprise Linux 5) - Not affected
Package: wireshark (Red Hat Enterprise Linux 6) - Not affected
Debian
CVE-2012-4287: wireshark - epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x befor...
vendor_debian·2012·CVSS 5.0
CVE-2012-4287 [MEDIUM] CVE-2012-4287: wireshark - epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x befor...
epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.
Scope: local
bookworm: resolved (fixed in 1.8.2-1)
bullseye: resolved (fixed in 1.8.2-1)
forky: resolved (fixed in 1.8.2-1)
sid: resolved (fixed in 1.8.2-1)
trixie: resolved (fixed in 1.8.2-1)
GHSA
GHSA-wrxh-w5jf-pm6p: epan/dissectors/packet-mongo
ghsa_unreviewed·2022-05-17
CVE-2012-4287 [MEDIUM] GHSA-wrxh-w5jf-pm6p: epan/dissectors/packet-mongo
epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.
OSV
CVE-2012-4287: epan/dissectors/packet-mongo
osv·2012-08-16·CVSS 5.0
CVE-2012-4287 [MEDIUM] CVE-2012-4287: epan/dissectors/packet-mongo
epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2012-4287 wireshark: DoS via excessive CPU consumption in MongoDB dissector (wnpa-sec-2012-14)
bugzilla·2012-08-15·CVSS 5.0
CVE-2012-4287 [MEDIUM] CVE-2012-4287 wireshark: DoS via excessive CPU consumption in MongoDB dissector (wnpa-sec-2012-14)
CVE-2012-4287 wireshark: DoS via excessive CPU consumption in MongoDB dissector (wnpa-sec-2012-14)
It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
Affects 1.8.0 to 1.8.1 and is fixed in upstream 1.8.2 version.
http://www.wireshark.org/security/wnpa-sec-2012-14.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7572
http://anonsvn.wireshark.org/viewvc?view=revision&revision=44288
Statement:
This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 5 and 6.
Discussion:
Sorry, this issue only affects rawhide/Fedora 18 which currently provides 1.8.1; earlier versions of Fedora provide 1.6.x.
---
Created wireshark tr
Bugzilla
CVE-2012-4294 CVE-2012-4295 CVE-2012-4286 CVE-2012-4298 CVE-2012-4287 wireshark various flaws [fedora-rawhide]
bugzilla·2012-08-15·CVSS 4.3
CVE-2012-4294 [MEDIUM] CVE-2012-4294 CVE-2012-4295 CVE-2012-4286 CVE-2012-4298 CVE-2012-4287 wireshark various flaws [fedora-rawhide]
CVE-2012-4294 CVE-2012-4295 CVE-2012-4286 CVE-2012-4298 CVE-2012-4287 wireshark various flaws [fedora-rawhide]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproj
http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mongo.c?r1=44288&r2=44287&pathrev=44288http://anonsvn.wireshark.org/viewvc?view=revision&revision=44288http://secunia.com/advisories/50276http://secunia.com/advisories/51363http://secunia.com/advisories/54425http://www.gentoo.org/security/en/glsa/glsa-201308-05.xmlhttp://www.securityfocus.com/bid/55035http://www.wireshark.org/security/wnpa-sec-2012-14.htmlhttps://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7572https://hermes.opensuse.org/messages/15514562https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15818http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mongo.c?r1=44288&r2=44287&pathrev=44288http://anonsvn.wireshark.org/viewvc?view=revision&revision=44288http://secunia.com/advisories/50276http://secunia.com/advisories/51363http://secunia.com/advisories/54425http://www.gentoo.org/security/en/glsa/glsa-201308-05.xmlhttp://www.securityfocus.com/bid/55035http://www.wireshark.org/security/wnpa-sec-2012-14.htmlhttps://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7572https://hermes.opensuse.org/messages/15514562https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15818
2012-08-16
Published