Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2012-4295

Array index error in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service (application crash) via a crafted speed (aka rate) value.

Related bugs and status

CVE-2012-4295 (Candidate) is related to these bugs:

Bug #1037434: <wireshark-{1.6.10,1.8.2} - multiple vulnerabilities

		In	Importance	Status
1037434	<wireshark-{1.6.10,1.8.2} - multiple vulnerabilities	wireshark (Ubuntu)	Undecided	Fix Released
1037434	<wireshark-{1.6.10,1.8.2} - multiple vulnerabilities	Gentoo Linux	Medium	Fix Released
1037434	<wireshark-{1.6.10,1.8.2} - multiple vulnerabilities	wireshark (Ubuntu Precise)	Undecided	Won't Fix

See the

CVE page on Mitre.org for more details.

References

CONFIRM: http://www.wireshark.o...
CONFIRM: https://bugs.wireshark...
SUSE: openSUSE-SU-2012:1067
BID: 55035
CONFIRM: https://blogs.oracle.c...
SECUNIA: 51363
GENTOO: GLSA-201308-05
SECUNIA: 50276
SECUNIA: 54425
CONFIRM: http://anonsvn.wiresha...
CONFIRM: http://anonsvn.wiresha...
OVAL: oval:org.mitre.oval:de...