Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.3

Wireshark may freeze processing certain network packets

CVE-2012-2392 · published 14 years ago
Summary

Versions of Wireshark before 1.4.13 and 1.6.8 can get stuck in an endless loop when they try to analyze specific types of network traffic. This can cause the application to become unresponsive, disrupting network monitoring tasks. Upgrade to a newer Wireshark version or apply the available patch to prevent the freeze.

What to do
  • Update debian wireshark to version 1.6.8-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian wireshark < 1.6.8-1
Fix: upgrade to 1.6.8-1
Debian:13 debian wireshark < 1.6.8-1
Fix: upgrade to 1.6.8-1
Debian:14 debian wireshark < 1.6.8-1
Fix: upgrade to 1.6.8-1
– wireshark wireshark 1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.4.10
1.4.11
10 more version ranges
cpe:2.3:a:wireshark:wireshark:1.4.0:*:*:*:*:*:*:*
Original advisory text
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE...
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors.
References
Severity
3.3 Low
Exploitation
3% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published30 Jun 2012
Updated22 Oct 2026
First seen5 Sep 2026
Sources
DEBIAN-CVE-2012-2392 · OSV
CVE-2012-2392 · NVD
Track software like this
Free during beta