Back to search
CVE-2012-4292
Published: Aug 16, 2012
Modified: Aug 6, 2024
PUBLISHED
Description
The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
55035
vdb-entry
x_refsource_BID
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7569
x_refsource_CONFIRM
54425
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:15158
vdb-entry
signature
x_refsource_OVAL
GLSA-201308-05
vendor-advisory
x_refsource_GENTOO
51363
third-party-advisory
x_refsource_SECUNIA
http://www.wireshark.org/security/wnpa-sec-2012-21.html
x_refsource_CONFIRM
http://anonsvn.wireshark.org/viewvc?view=revision&revision=44366
x_refsource_CONFIRM
http://anonsvn.wireshark.org/viewvc?view=revision&revision=44380
x_refsource_CONFIRM
openSUSE-SU-2012:1035
vendor-advisory
x_refsource_SUSE
50276
third-party-advisory
x_refsource_SECUNIA
openSUSE-SU-2012:1067
vendor-advisory
x_refsource_SUSE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now