CVE-2012-4297 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Wireshark

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer8 documents7 sources

Severity

8.3HIGHNVD

EPSS

8.5%

top 7.62%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Wireshark SUN Sunos

Timeline

PublishedAug 16

Latest updateMay 17

Description

Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a malformed packet.

CVSS vector

AV:A/AC:L/C:C/I:C/A:CExploitability: 6.5 | Impact: 10.0

Affected Packages3 packages

▶Debianwireshark/wireshark< 1.8.2-1+3

▶NVDwireshark/wireshark12 versions+11

▶NVDsun/sunos5.11

Patches

Patch: anonsvn.wireshark.org ↗Patch: anonsvn.wireshark.org ↗Patch: anonsvn.wireshark.org ↗

🔴Vulnerability Details

GHSA

GHSA-8w6r-wf45-f8wh: Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac↗2022-05-17

▶

CVEList

CVE-2012-4297: Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac↗2012-08-16

▶

OSV

CVE-2012-4297: Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac↗2012-08-16

▶

📋Vendor Advisories

Red Hat

wireshark: buffer overflow in GSM RLC MAC dissector (wnpa-sec-2012-19)↗2012-08-15

▶

Debian

CVE-2012-4297: wireshark - Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/p...↗2012

▶

💬Community

Bugzilla

CVE-2012-4297 wireshark: buffer overflow in GSM RLC MAC dissector (wnpa-sec-2012-19)↗2012-08-15

▶

Bugzilla

CVE-2012-4285 CVE-2012-4288 CVE-2012-4289 CVE-2012-4296 CVE-2012-4291 CVE-2012-4292 CVE-2012-4293 CVE-2012-4290 CVE-2012-4297 wireshark various flaws [fedora-all]↗2012-08-15

▶