CVE-2012-1596

The mp2t_process_fragmented_payload function in epan/dissectors/packet-mp2t.c in the MP2T dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a packet containing an invalid pointer value that triggers an incorrect memory-allocation attempt.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
VendorProductVersion
wiresharkwireshark
1.4.0
wiresharkwireshark
1.4.1
wiresharkwireshark
1.4.2
wiresharkwireshark
1.4.3
wiresharkwireshark
1.4.4
wiresharkwireshark
1.4.5
wiresharkwireshark
1.4.6
wiresharkwireshark
1.4.7
wiresharkwireshark
1.4.8
wiresharkwireshark
1.4.9
wiresharkwireshark
1.4.10
wiresharkwireshark
1.4.11
wiresharkwireshark
1.6.0
wiresharkwireshark
1.6.1
wiresharkwireshark
1.6.2
wiresharkwireshark
1.6.3
wiresharkwireshark
1.6.4
wiresharkwireshark
1.6.5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
wireshark
bullseye
3.4.10-0+deb11u1
fixed
bullseye (security)
3.4.16-0+deb11u1
fixed
bookworm
4.0.11-1~deb12u1
fixed
bookworm (security)
4.0.11-1~deb12u1
fixed
trixie
4.4.0-1
fixed
sid
4.4.1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wireshark
raring
not-affected
quantal
not-affected
precise
not-affected
oneiric
ignored
natty
ignored
maverick
not-affected
lucid
not-affected
hardy
not-affected
Common Weakness Enumeration
References