FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2012-3548

This CVE name corresponds to:

Entered	Topic
2012-08-31	wireshark -- denial of service in DRDA dissector

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2012-3548 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2012-3548
Phase	Assigned(20120614)

Description

The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a small value for a certain length field in a capture file.

References

Source	Reference
MLIST	[oss-security] 20120829 Re: CVE Request -- wireshark (X >= 1.6.8): DoS (excessive CPU use and infinite loop) in DRDA dissector
CONFIRM	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7666
CONFIRM	https://bugzilla.redhat.com/show_bug.cgi?id=849926
GENTOO	GLSA-201308-05
OVAL	oval:org.mitre.oval:def:15646
SECTRACK	1027464
SECUNIA	54425