Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2012-4286

The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted pcap-ng file.

Related bugs and status

CVE-2012-4286 (Candidate) is related to these bugs:

Bug #1037434: <wireshark-{1.6.10,1.8.2} - multiple vulnerabilities

		In	Importance	Status
1037434	<wireshark-{1.6.10,1.8.2} - multiple vulnerabilities	wireshark (Ubuntu)	Undecided	Fix Released
1037434	<wireshark-{1.6.10,1.8.2} - multiple vulnerabilities	Gentoo Linux	Medium	Fix Released
1037434	<wireshark-{1.6.10,1.8.2} - multiple vulnerabilities	wireshark (Ubuntu Precise)	Undecided	Won't Fix

See the

CVE page on Mitre.org for more details.

References

CONFIRM: http://www.wireshark.o...
CONFIRM: https://bugs.wireshark...
SUSE: openSUSE-SU-2012:1067
BID: 55035
CONFIRM: https://blogs.oracle.c...
SECUNIA: 51363
GENTOO: GLSA-201308-05
SECUNIA: 50276
SECUNIA: 54425
CONFIRM: http://anonsvn.wiresha...
CONFIRM: http://anonsvn.wiresha...
OVAL: oval:org.mitre.oval:de...