CVE-2012-4049
Gentoo Linux Security Advisory 201308-05
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet.
epan/dissectors/packet-nfs.c en el disector de NFS en Wireshark v1.4.x antes de v1.4.14, v1.6.x antes de v1.6.9 y v1.8.x antes de v1.8.1 permite a atacantes remotos provocar una denegación de servicio (bucle y excesivo consumo de CPU) a través de un paquete diseñado para tal fin.
Multiple vulnerabilities have been found in Wireshark, allowing remote attackers to execute arbitrary code or cause Denial of Service. Versions less than 1.10.1 are affected.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-07-24 CVE Reserved
- 2012-07-24 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://anonsvn.wireshark.org/viewvc?view=revision&revision=43576 | X_refsource_confirm | |
| http://secunia.com/advisories/49971 | Third Party Advisory | |
| http://secunia.com/advisories/54425 | Third Party Advisory | |
| https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7436 | X_refsource_confirm | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15707 | Signature |
| URL | Date | SRC |
|---|---|---|
| http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-nfs.c?r1=43576&r2=43575&pathrev=43576 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-updates/2012-08/msg00000.html | 2018-10-30 | |
| http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml | 2018-10-30 | |
| http://www.wireshark.org/security/wnpa-sec-2012-12.html | 2018-10-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.0 Search vendor "Wireshark" for product "Wireshark" and version "1.4.0" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.0 Search vendor "Wireshark" for product "Wireshark" and version "1.4.0" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.0 Search vendor "Wireshark" for product "Wireshark" and version "1.4.0" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.1 Search vendor "Wireshark" for product "Wireshark" and version "1.4.1" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.1 Search vendor "Wireshark" for product "Wireshark" and version "1.4.1" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.1 Search vendor "Wireshark" for product "Wireshark" and version "1.4.1" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.2 Search vendor "Wireshark" for product "Wireshark" and version "1.4.2" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.2 Search vendor "Wireshark" for product "Wireshark" and version "1.4.2" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.2 Search vendor "Wireshark" for product "Wireshark" and version "1.4.2" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.3 Search vendor "Wireshark" for product "Wireshark" and version "1.4.3" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.3 Search vendor "Wireshark" for product "Wireshark" and version "1.4.3" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.3 Search vendor "Wireshark" for product "Wireshark" and version "1.4.3" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.4 Search vendor "Wireshark" for product "Wireshark" and version "1.4.4" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.4 Search vendor "Wireshark" for product "Wireshark" and version "1.4.4" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.4 Search vendor "Wireshark" for product "Wireshark" and version "1.4.4" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.5 Search vendor "Wireshark" for product "Wireshark" and version "1.4.5" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.5 Search vendor "Wireshark" for product "Wireshark" and version "1.4.5" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.5 Search vendor "Wireshark" for product "Wireshark" and version "1.4.5" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.6 Search vendor "Wireshark" for product "Wireshark" and version "1.4.6" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.6 Search vendor "Wireshark" for product "Wireshark" and version "1.4.6" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.6 Search vendor "Wireshark" for product "Wireshark" and version "1.4.6" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.7 Search vendor "Wireshark" for product "Wireshark" and version "1.4.7" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.7 Search vendor "Wireshark" for product "Wireshark" and version "1.4.7" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.7 Search vendor "Wireshark" for product "Wireshark" and version "1.4.7" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.8 Search vendor "Wireshark" for product "Wireshark" and version "1.4.8" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.8 Search vendor "Wireshark" for product "Wireshark" and version "1.4.8" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.8 Search vendor "Wireshark" for product "Wireshark" and version "1.4.8" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.9 Search vendor "Wireshark" for product "Wireshark" and version "1.4.9" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.9 Search vendor "Wireshark" for product "Wireshark" and version "1.4.9" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.9 Search vendor "Wireshark" for product "Wireshark" and version "1.4.9" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.10 Search vendor "Wireshark" for product "Wireshark" and version "1.4.10" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.10 Search vendor "Wireshark" for product "Wireshark" and version "1.4.10" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.10 Search vendor "Wireshark" for product "Wireshark" and version "1.4.10" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.11 Search vendor "Wireshark" for product "Wireshark" and version "1.4.11" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.11 Search vendor "Wireshark" for product "Wireshark" and version "1.4.11" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.11 Search vendor "Wireshark" for product "Wireshark" and version "1.4.11" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.12 Search vendor "Wireshark" for product "Wireshark" and version "1.4.12" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.12 Search vendor "Wireshark" for product "Wireshark" and version "1.4.12" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.12 Search vendor "Wireshark" for product "Wireshark" and version "1.4.12" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.13 Search vendor "Wireshark" for product "Wireshark" and version "1.4.13" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.13 Search vendor "Wireshark" for product "Wireshark" and version "1.4.13" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.13 Search vendor "Wireshark" for product "Wireshark" and version "1.4.13" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.0 Search vendor "Wireshark" for product "Wireshark" and version "1.8.0" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.0 Search vendor "Wireshark" for product "Wireshark" and version "1.8.0" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.0 Search vendor "Wireshark" for product "Wireshark" and version "1.8.0" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.0 Search vendor "Wireshark" for product "Wireshark" and version "1.6.0" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.0 Search vendor "Wireshark" for product "Wireshark" and version "1.6.0" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.0 Search vendor "Wireshark" for product "Wireshark" and version "1.6.0" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.1 Search vendor "Wireshark" for product "Wireshark" and version "1.6.1" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.1 Search vendor "Wireshark" for product "Wireshark" and version "1.6.1" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.1 Search vendor "Wireshark" for product "Wireshark" and version "1.6.1" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.2 Search vendor "Wireshark" for product "Wireshark" and version "1.6.2" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.2 Search vendor "Wireshark" for product "Wireshark" and version "1.6.2" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.2 Search vendor "Wireshark" for product "Wireshark" and version "1.6.2" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.3 Search vendor "Wireshark" for product "Wireshark" and version "1.6.3" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.3 Search vendor "Wireshark" for product "Wireshark" and version "1.6.3" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.3 Search vendor "Wireshark" for product "Wireshark" and version "1.6.3" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.4 Search vendor "Wireshark" for product "Wireshark" and version "1.6.4" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.4 Search vendor "Wireshark" for product "Wireshark" and version "1.6.4" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.4 Search vendor "Wireshark" for product "Wireshark" and version "1.6.4" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.5 Search vendor "Wireshark" for product "Wireshark" and version "1.6.5" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.5 Search vendor "Wireshark" for product "Wireshark" and version "1.6.5" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.5 Search vendor "Wireshark" for product "Wireshark" and version "1.6.5" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.6 Search vendor "Wireshark" for product "Wireshark" and version "1.6.6" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.6 Search vendor "Wireshark" for product "Wireshark" and version "1.6.6" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.6 Search vendor "Wireshark" for product "Wireshark" and version "1.6.6" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.7 Search vendor "Wireshark" for product "Wireshark" and version "1.6.7" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.7 Search vendor "Wireshark" for product "Wireshark" and version "1.6.7" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.7 Search vendor "Wireshark" for product "Wireshark" and version "1.6.7" | sparc |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.8 Search vendor "Wireshark" for product "Wireshark" and version "1.6.8" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.8 Search vendor "Wireshark" for product "Wireshark" and version "1.6.8" | itanium |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.8 Search vendor "Wireshark" for product "Wireshark" and version "1.6.8" | sparc |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 11.4 Search vendor "Opensuse" for product "Opensuse" and version "11.4" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 12.1 Search vendor "Opensuse" for product "Opensuse" and version "12.1" | - |
Affected
| ||||||