Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2012-4292

Опубликовано: 16 авг. 2012
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 3.3

Описание

The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

РелизСтатусПримечание
devel

not-affected

1.12.1+g01b65bf-2
esm-apps/xenial

not-affected

1.12.1+g01b65bf-2
esm-infra-legacy/trusty

not-affected

1.10.6-1
hardy

ignored

end of life
lucid

not-affected

1.2.7-1
natty

ignored

end of life
oneiric

ignored

end of life
precise

ignored

end of life
precise/esm

DNE

precise was needed
quantal

ignored

end of life

Показывать по

EPSS

Процентиль: 77%
0.0113
Низкий

3.3 Low

CVSS2

Связанные уязвимости

redhat
около 13 лет назад

The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

nvd
около 13 лет назад

The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

debian
около 13 лет назад

The dissect_stun_message function in epan/dissectors/packet-stun.c in ...

github
больше 3 лет назад

The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

oracle-oval
больше 11 лет назад

ELSA-2013-1569: wireshark security, bug fix, and enhancement update (MODERATE)

EPSS

Процентиль: 77%
0.0113
Низкий

3.3 Low

CVSS2