Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-4288
HistoryAug 16, 2012 - 10:38 a.m.

CVE-2012-4288

2012-08-1610:38:08
CWE-189
[email protected]
web.nvd.nist.gov
3

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

Low

EPSS

0.004

Percentile

72.2%

JSON

Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large value for a span length.

Affected configurations

Nvd
Node
opensuseopensuseMatch11.4
OR
opensuseopensuseMatch12.1
OR
sunsunosMatch5.11
Node
wiresharkwiresharkMatch1.8.0
OR
wiresharkwiresharkMatch1.8.1
Node
wiresharkwiresharkMatch1.6.0
OR
wiresharkwiresharkMatch1.6.1
OR
wiresharkwiresharkMatch1.6.2
OR
wiresharkwiresharkMatch1.6.3
OR
wiresharkwiresharkMatch1.6.4
OR
wiresharkwiresharkMatch1.6.5
OR
wiresharkwiresharkMatch1.6.6
OR
wiresharkwiresharkMatch1.6.7
OR
wiresharkwiresharkMatch1.6.8
OR
wiresharkwiresharkMatch1.6.9
Node
wiresharkwiresharkMatch1.4.0
OR
wiresharkwiresharkMatch1.4.1
OR
wiresharkwiresharkMatch1.4.2
OR
wiresharkwiresharkMatch1.4.3
OR
wiresharkwiresharkMatch1.4.4
OR
wiresharkwiresharkMatch1.4.5
OR
wiresharkwiresharkMatch1.4.6
OR
wiresharkwiresharkMatch1.4.7
OR
wiresharkwiresharkMatch1.4.8
OR
wiresharkwiresharkMatch1.4.9
OR
wiresharkwiresharkMatch1.4.10
OR
wiresharkwiresharkMatch1.4.11
OR
wiresharkwiresharkMatch1.4.12
OR
wiresharkwiresharkMatch1.4.13
OR
wiresharkwiresharkMatch1.4.14
VendorProductVersionCPE
opensuseopensuse11.4cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
opensuseopensuse12.1cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*
sunsunos5.11cpe:2.3:o:sun:sunos:5.11:*:*:*:*:*:*:*
wiresharkwireshark1.8.0cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*
wiresharkwireshark1.8.1cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*
wiresharkwireshark1.6.0cpe:2.3:a:wireshark:wireshark:1.6.0:*:*:*:*:*:*:*
wiresharkwireshark1.6.1cpe:2.3:a:wireshark:wireshark:1.6.1:*:*:*:*:*:*:*
wiresharkwireshark1.6.2cpe:2.3:a:wireshark:wireshark:1.6.2:*:*:*:*:*:*:*
wiresharkwireshark1.6.3cpe:2.3:a:wireshark:wireshark:1.6.3:*:*:*:*:*:*:*
wiresharkwireshark1.6.4cpe:2.3:a:wireshark:wireshark:1.6.4:*:*:*:*:*:*:*
Rows per page:
1-10 of 301

Related

cvelist 1
debiancve 1
prion 1
cve 1
ubuntucve 1
openvas 18
nessus 20
securityvulns 2
fedora 2
freebsd 1
veracode 24
centos 1
redhat 1
amazon 1
oraclelinux 1
gentoo 1
cvelist
cvelist
CVE-2012-4288
2012-08-16 10:00:00
debiancve
debiancve
CVE-2012-4288
2012-08-16 10:38:08
prion
prion
Integer overflow
2012-08-16 10:38:00
cve
cve
CVE-2012-4288
2012-08-16 10:38:08
ubuntucve
ubuntucve
CVE-2012-4288
2012-08-16 00:00:00
openvas
openvas
Wireshark Multiple Vulnerabilities - August 2012 (Windows)
2012-08-21 00:00:00
Wireshark Multiple Vulnerabilities-01 (Dec 2012) - Mac OS X
2012-12-28 00:00:00
Wireshark Multiple Vulnerabilities (Aug 2012) - Windows
2012-08-21 00:00:00
nessus
nessus
Wireshark 1.4.x < 1.4.15 Multiple Vulnerabilities (macOS)
2023-05-25 00:00:00
Wireshark 1.4.x < 1.4.15 Multiple Vulnerabilities
2012-08-17 00:00:00
openSUSE Security Update : wireshark (openSUSE-SU-2012:1035-1)
2014-06-13 00:00:00
securityvulns
securityvulns
[ MDVSA-2012:135 ] wireshark
2012-08-20 00:00:00
Wireshark security vulnerabilities
2012-08-20 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: wireshark-1.6.10-1.fc16
2012-08-27 22:55:57
[SECURITY] Fedora 17 Update: wireshark-1.6.10-1.fc17
2012-08-27 23:05:49
freebsd
freebsd
Wireshark -- Multiple vulnerabilities
2012-07-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:58:54
Denial Of Service (DoS)
2019-05-02 04:58:54
Denial Of Service (DoS)
2019-05-02 04:58:55
centos
centos
wireshark security update
2013-11-26 13:33:12
redhat
redhat
(RHSA-2013:1569) Moderate: wireshark security, bug fix, and enhancement update
2013-11-21 00:00:00
amazon
amazon
Medium: wireshark
2013-12-02 20:29:00
oraclelinux
oraclelinux
wireshark security, bug fix, and enhancement update
2013-11-25 00:00:00
gentoo
gentoo
Wireshark: Multiple vulnerabilities
2013-08-28 00:00:00

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

Low

EPSS

0.004

Percentile

72.2%

JSON
Related for NVD:CVE-2012-4288
cvelist1debiancve1prion1cve1ubuntucve1openvas18nessus20securityvulns2fedora2freebsd1veracode24centos1redhat1amazon1oraclelinux1gentoo1