CVE-2012-5238: Low severity wireshark vulnerability
Published Oct 4, 2012
·Updated
epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.3 uses incorrect OUI data structures during the decoding of (1) PPP and (2) LCP data, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a malformed packet.
Affected Software
3 affected components
Wireshark Wireshark=1.8.0
Wireshark Wireshark=1.8.1
Wireshark Wireshark=1.8.2
Remediation
Event History
Oct 4, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5238?
CVE-2012-5238 has a severity rating of medium due to its denial of service impact.
2
How do I fix CVE-2012-5238?
To fix CVE-2012-5238, upgrade to Wireshark version 1.8.3 or later.
3
What does CVE-2012-5238 affect?
CVE-2012-5238 affects Wireshark versions 1.8.0 through 1.8.2.
4
What kind of attack does CVE-2012-5238 facilitate?
CVE-2012-5238 facilitates a denial of service attack through malformed PPP packets.
5
Is there a known exploit for CVE-2012-5238?
Yes, CVE-2012-5238 can be exploited by sending specially crafted packets that trigger an assertion failure.