Lucene search

[email protected]NVD:CVE-2012-4049

HistoryJul 24, 2012 - 7:55 p.m.

CVE-2012-4049

2012-07-2419:55:03

CWE-94

[email protected]

web.nvd.nist.gov

CVSS2

2.9

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.007

Percentile

80.5%

JSON

epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet.

Affected configurations

Nvd

Node

wiresharkwiresharkMatch1.4.0

wiresharkwiresharkMatch1.4.0itanium

wiresharkwiresharkMatch1.4.0sparc

wiresharkwiresharkMatch1.4.1

wiresharkwiresharkMatch1.4.1itanium

wiresharkwiresharkMatch1.4.1sparc

wiresharkwiresharkMatch1.4.2

wiresharkwiresharkMatch1.4.2itanium

wiresharkwiresharkMatch1.4.2sparc

wiresharkwiresharkMatch1.4.3

wiresharkwiresharkMatch1.4.3itanium

wiresharkwiresharkMatch1.4.3sparc

wiresharkwiresharkMatch1.4.4

wiresharkwiresharkMatch1.4.4itanium

wiresharkwiresharkMatch1.4.4sparc

wiresharkwiresharkMatch1.4.5

wiresharkwiresharkMatch1.4.5itanium

wiresharkwiresharkMatch1.4.5sparc

wiresharkwiresharkMatch1.4.6

wiresharkwiresharkMatch1.4.6itanium

wiresharkwiresharkMatch1.4.6sparc

wiresharkwiresharkMatch1.4.7

wiresharkwiresharkMatch1.4.7itanium

wiresharkwiresharkMatch1.4.7sparc

wiresharkwiresharkMatch1.4.8

wiresharkwiresharkMatch1.4.8itanium

wiresharkwiresharkMatch1.4.8sparc

wiresharkwiresharkMatch1.4.9

wiresharkwiresharkMatch1.4.9itanium

wiresharkwiresharkMatch1.4.9sparc

wiresharkwiresharkMatch1.4.10

wiresharkwiresharkMatch1.4.10itanium

wiresharkwiresharkMatch1.4.10sparc

wiresharkwiresharkMatch1.4.11

wiresharkwiresharkMatch1.4.11itanium

wiresharkwiresharkMatch1.4.11sparc

wiresharkwiresharkMatch1.4.12

wiresharkwiresharkMatch1.4.12itanium

wiresharkwiresharkMatch1.4.12sparc

wiresharkwiresharkMatch1.4.13

wiresharkwiresharkMatch1.4.13itanium

wiresharkwiresharkMatch1.4.13sparc

Node

wiresharkwiresharkMatch1.8.0

wiresharkwiresharkMatch1.8.0itanium

wiresharkwiresharkMatch1.8.0sparc

Node

wiresharkwiresharkMatch1.6.0

wiresharkwiresharkMatch1.6.0itanium

wiresharkwiresharkMatch1.6.0sparc

wiresharkwiresharkMatch1.6.1

wiresharkwiresharkMatch1.6.1itanium

wiresharkwiresharkMatch1.6.1sparc

wiresharkwiresharkMatch1.6.2

wiresharkwiresharkMatch1.6.2itanium

wiresharkwiresharkMatch1.6.2sparc

wiresharkwiresharkMatch1.6.3

wiresharkwiresharkMatch1.6.3itanium

wiresharkwiresharkMatch1.6.3sparc

wiresharkwiresharkMatch1.6.4

wiresharkwiresharkMatch1.6.4itanium

wiresharkwiresharkMatch1.6.4sparc

wiresharkwiresharkMatch1.6.5

wiresharkwiresharkMatch1.6.5itanium

wiresharkwiresharkMatch1.6.5sparc

wiresharkwiresharkMatch1.6.6

wiresharkwiresharkMatch1.6.6itanium

wiresharkwiresharkMatch1.6.6sparc

wiresharkwiresharkMatch1.6.7

wiresharkwiresharkMatch1.6.7itanium

wiresharkwiresharkMatch1.6.7sparc

wiresharkwiresharkMatch1.6.8

wiresharkwiresharkMatch1.6.8itanium

wiresharkwiresharkMatch1.6.8sparc

Node

opensuseopensuseMatch11.4

opensuseopensuseMatch12.1

References

anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-nfs.c?r1=43576&r2=43575&pathrev=43576

anonsvn.wireshark.org/viewvc?view=revision&revision=43576

lists.opensuse.org/opensuse-updates/2012-08/msg00000.html

secunia.com/advisories/49971

secunia.com/advisories/54425

www.gentoo.org/security/en/glsa/glsa-201308-05.xml

www.wireshark.org/security/wnpa-sec-2012-12.html

bugs.wireshark.org/bugzilla/show_bug.cgi?id=7436

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15707

CVSS2

2.9

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.007

Percentile

80.5%

JSON

Related for NVD:CVE-2012-4049

ubuntucve1 cvelist1 debiancve1 cve1 prion1 openvas10 nessus11 securityvulns2 freebsd1 gentoo1