Lucene search

RedhatCVE-2012-2393

HistoryJun 30, 2012 - 10:15 a.m.

CVE-2012-2393

2012-06-3010:15:05

CWE-119

redhat

web.nvd.nist.gov

wireshark

vulnerability

cve-2012-2393

diameter dissector

packet-diameter

remote attackers

denial of service

nvd

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.016

Percentile

87.4%

JSON

epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers incorrect memory allocation.

Affected configurations

Nvd

Node

wiresharkwiresharkMatch1.4.0

wiresharkwiresharkMatch1.4.1

wiresharkwiresharkMatch1.4.2

wiresharkwiresharkMatch1.4.3

wiresharkwiresharkMatch1.4.4

wiresharkwiresharkMatch1.4.5

wiresharkwiresharkMatch1.4.6

wiresharkwiresharkMatch1.4.7

wiresharkwiresharkMatch1.4.8

wiresharkwiresharkMatch1.4.9

wiresharkwiresharkMatch1.4.10

wiresharkwiresharkMatch1.4.11

wiresharkwiresharkMatch1.4.12

wiresharkwiresharkMatch1.4.13

wiresharkwiresharkMatch1.6.0

wiresharkwiresharkMatch1.6.1

wiresharkwiresharkMatch1.6.2

wiresharkwiresharkMatch1.6.3

wiresharkwiresharkMatch1.6.4

wiresharkwiresharkMatch1.6.5

wiresharkwiresharkMatch1.6.6

wiresharkwiresharkMatch1.6.7

VendorProductVersionCPE
wiresharkwireshark1.6.5cpe:/a:wireshark:wireshark:1.6.5:::
wiresharkwireshark1.4.5cpe:/a:wireshark:wireshark:1.4.5:::
wiresharkwireshark1.4.7cpe:/a:wireshark:wireshark:1.4.7:::
wiresharkwireshark1.4.2cpe:/a:wireshark:wireshark:1.4.2:::
wiresharkwireshark1.4.0cpe:/a:wireshark:wireshark:1.4.0:::
wiresharkwireshark1.6.1cpe:/a:wireshark:wireshark:1.6.1:::
wiresharkwireshark1.4.3cpe:/a:wireshark:wireshark:1.4.3:::
wiresharkwireshark1.6.3cpe:/a:wireshark:wireshark:1.6.3:::
wiresharkwireshark1.4.8cpe:/a:wireshark:wireshark:1.4.8:::
wiresharkwireshark1.4.4cpe:/a:wireshark:wireshark:1.4.4:::

Vendor	Product	Version	CPE
wireshark	wireshark	1.6.5	cpe:/a:wireshark:wireshark:1.6.5:::
wireshark	wireshark	1.4.5	cpe:/a:wireshark:wireshark:1.4.5:::
wireshark	wireshark	1.4.7	cpe:/a:wireshark:wireshark:1.4.7:::
wireshark	wireshark	1.4.2	cpe:/a:wireshark:wireshark:1.4.2:::
wireshark	wireshark	1.4.0	cpe:/a:wireshark:wireshark:1.4.0:::
wireshark	wireshark	1.6.1	cpe:/a:wireshark:wireshark:1.6.1:::
wireshark	wireshark	1.4.3	cpe:/a:wireshark:wireshark:1.4.3:::
wireshark	wireshark	1.6.3	cpe:/a:wireshark:wireshark:1.6.3:::
wireshark	wireshark	1.4.8	cpe:/a:wireshark:wireshark:1.4.8:::
wireshark	wireshark	1.4.4	cpe:/a:wireshark:wireshark:1.4.4:::