CVE-2012-4296 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Wireshark

CWE-3998 documents7 sources

Severity

3.3LOWNVD

EPSS

1.5%

top 19.12%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Wireshark Opensuse SUN Sunos

Timeline

PublishedAug 16

Latest updateMay 14

Description

Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet.

CVSS vector

AV:A/AC:L/C:N/I:N/A:PExploitability: 6.5 | Impact: 2.9

Affected Packages4 packages

▶Debianwireshark/wireshark< 1.8.2-1+3

▶NVDwireshark/wireshark27 versions+26

▶NVDsun/sunos5.11

▶NVDopensuse/opensuse11.4, 12.1+1

Patches

Patch: anonsvn.wireshark.org ↗Patch: anonsvn.wireshark.org ↗

🔴Vulnerability Details

GHSA

GHSA-c734-m6c8-xp2x: Buffer overflow in epan/dissectors/packet-rtps2↗2022-05-14

▶

OSV

CVE-2012-4296: Buffer overflow in epan/dissectors/packet-rtps2↗2012-08-16

▶

CVEList

CVE-2012-4296: Buffer overflow in epan/dissectors/packet-rtps2↗2012-08-16

▶

📋Vendor Advisories

Red Hat

wireshark: DoS via excessive CPU consumption in RTPS2 dissector (wnpa-sec-2012-18)↗2012-08-15

▶

Debian

CVE-2012-4296: wireshark - Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wire...↗2012

▶

💬Community

Bugzilla

CVE-2012-4296 wireshark: DoS via excessive CPU consumption in RTPS2 dissector (wnpa-sec-2012-18)↗2012-08-15

▶

Bugzilla

CVE-2012-4285 CVE-2012-4288 CVE-2012-4289 CVE-2012-4296 CVE-2012-4291 CVE-2012-4292 CVE-2012-4293 CVE-2012-4290 CVE-2012-4297 wireshark various flaws [fedora-all]↗2012-08-15

▶