CVE-2012-2393: Buffer Overflow

Published Jun 30, 2012

Updated

epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers incorrect memory allocation.

Affected Software

22 affected components

Wireshark Wireshark=1.4.0

Wireshark Wireshark=1.4.1

Wireshark Wireshark=1.4.2

Wireshark Wireshark=1.4.3

Wireshark Wireshark=1.4.4

Wireshark Wireshark=1.4.5

Wireshark Wireshark=1.4.6

Wireshark Wireshark=1.4.7

Wireshark Wireshark=1.4.8

Wireshark Wireshark=1.4.9

Wireshark Wireshark=1.4.10

Wireshark Wireshark=1.4.11

Wireshark Wireshark=1.4.12

Wireshark Wireshark=1.4.13

Wireshark Wireshark=1.6.0

Wireshark Wireshark=1.6.1

Wireshark Wireshark=1.6.2

Wireshark Wireshark=1.6.3

Wireshark Wireshark=1.6.4

Wireshark Wireshark=1.6.5

Wireshark Wireshark=1.6.6

Wireshark Wireshark=1.6.7

Remediation

Patch Available

http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-diameter.c?r1=42200&r2=42199&pathrev=42200

Event History

Jun 30, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-2393?

CVE-2012-2393 has a severity rating of medium, as it can lead to application crashes and denial of service.

How do I fix CVE-2012-2393?

To fix CVE-2012-2393, upgrade Wireshark to versions 1.4.13 or 1.6.8 or later.

What types of applications are affected by CVE-2012-2393?

CVE-2012-2393 affects Wireshark versions 1.4.0 to 1.4.12 and 1.6.0 to 1.6.7.

What attack vector is used in CVE-2012-2393?

CVE-2012-2393 can be exploited remotely through a crafted packet sent to the vulnerable Wireshark application.

What are the consequences of exploiting CVE-2012-2393?

Exploiting CVE-2012-2393 may result in an application crash, causing denial of service.