First published: Tue Jul 24 2012(Updated: )
The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted packet, as demonstrated by a usbmon dump.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Wireshark Wireshark | =1.4.0 | |
Wireshark Wireshark | =1.4.0 | |
Wireshark Wireshark | =1.4.0 | |
Wireshark Wireshark | =1.4.1 | |
Wireshark Wireshark | =1.4.1 | |
Wireshark Wireshark | =1.4.1 | |
Wireshark Wireshark | =1.4.2 | |
Wireshark Wireshark | =1.4.2 | |
Wireshark Wireshark | =1.4.2 | |
Wireshark Wireshark | =1.4.3 | |
Wireshark Wireshark | =1.4.3 | |
Wireshark Wireshark | =1.4.3 | |
Wireshark Wireshark | =1.4.4 | |
Wireshark Wireshark | =1.4.4 | |
Wireshark Wireshark | =1.4.4 | |
Wireshark Wireshark | =1.4.5 | |
Wireshark Wireshark | =1.4.5 | |
Wireshark Wireshark | =1.4.5 | |
Wireshark Wireshark | =1.4.6 | |
Wireshark Wireshark | =1.4.6 | |
Wireshark Wireshark | =1.4.6 | |
Wireshark Wireshark | =1.4.7 | |
Wireshark Wireshark | =1.4.7 | |
Wireshark Wireshark | =1.4.7 | |
Wireshark Wireshark | =1.4.8 | |
Wireshark Wireshark | =1.4.8 | |
Wireshark Wireshark | =1.4.8 | |
Wireshark Wireshark | =1.4.9 | |
Wireshark Wireshark | =1.4.9 | |
Wireshark Wireshark | =1.4.9 | |
Wireshark Wireshark | =1.4.10 | |
Wireshark Wireshark | =1.4.10 | |
Wireshark Wireshark | =1.4.10 | |
Wireshark Wireshark | =1.4.11 | |
Wireshark Wireshark | =1.4.11 | |
Wireshark Wireshark | =1.4.11 | |
Wireshark Wireshark | =1.4.12 | |
Wireshark Wireshark | =1.4.12 | |
Wireshark Wireshark | =1.4.12 | |
Wireshark Wireshark | =1.4.13 | |
Wireshark Wireshark | =1.4.13 | |
Wireshark Wireshark | =1.4.13 | |
Debian GNU/Linux | =6.0 | |
Wireshark Wireshark | =1.8.0 | |
Wireshark Wireshark | =1.8.0 | |
Wireshark Wireshark | =1.8.0 | |
Wireshark Wireshark | =1.6.0 | |
Wireshark Wireshark | =1.6.0 | |
Wireshark Wireshark | =1.6.0 | |
Wireshark Wireshark | =1.6.1 | |
Wireshark Wireshark | =1.6.1 | |
Wireshark Wireshark | =1.6.1 | |
Wireshark Wireshark | =1.6.2 | |
Wireshark Wireshark | =1.6.2 | |
Wireshark Wireshark | =1.6.2 | |
Wireshark Wireshark | =1.6.3 | |
Wireshark Wireshark | =1.6.3 | |
Wireshark Wireshark | =1.6.3 | |
Wireshark Wireshark | =1.6.4 | |
Wireshark Wireshark | =1.6.4 | |
Wireshark Wireshark | =1.6.4 | |
Wireshark Wireshark | =1.6.5 | |
Wireshark Wireshark | =1.6.5 | |
Wireshark Wireshark | =1.6.5 | |
Wireshark Wireshark | =1.6.6 | |
Wireshark Wireshark | =1.6.6 | |
Wireshark Wireshark | =1.6.6 | |
Wireshark Wireshark | =1.6.7 | |
Wireshark Wireshark | =1.6.7 | |
Wireshark Wireshark | =1.6.7 | |
Wireshark Wireshark | =1.6.8 | |
Wireshark Wireshark | =1.6.8 | |
Wireshark Wireshark | =1.6.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-4048 has a severity rating that indicates a potential denial of service vulnerability.
To fix CVE-2012-4048, upgrade Wireshark to versions 1.4.14, 1.6.9, or 1.8.1 or later.
CVE-2012-4048 affects multiple versions of Wireshark including 1.4.x prior to 1.4.14, 1.6.x prior to 1.6.9, and 1.8.x prior to 1.8.1.
CVE-2012-4048 can be exploited by sending crafted packets that cause an application crash due to invalid pointer dereference.
There is no effective workaround for CVE-2012-4048, so upgrading to a fixed version is recommended.