CVE-2012-0067: redhat enterprise_linux Improper Input Validation

CVSS: 4.3v2.0MediumModified

AliasesDEBIAN-CVE-2012-0067

Published 11-04-2012Last modified 06-08-2024

Vulnerability summary

CVE-2012-0067 is a medium (CVSS 4.3) Improper Input Validation vulnerability in redhat enterprise_linux. EPSS estimates a 6.52% chance of exploitation in the next 30 days, higher than 93.7% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

29/100

0100

Medium · default modelHow is this calculated?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

6.52%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 3

DSA-2395-1 RHSA-2012:0509 RHSA-2013:0125

Timeline

11-04-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

6.52%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.52% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.52%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (bugs.wireshark.org)
Maturity: unknown
exploit-databasedoslinuxVerified
Wireshark - Buffer Underflow / Denial of Service
Maturity: poc

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Debian1 product

wireshark< 1.6.5-1

Redhat1 product

enterprise_linuxEOL5

Wireshark1 product

wiresharkEOL1.6.0 | 1.6.1 | 1.6.2 | 1.6.3 | 1.6.4 | 1.4.0 | 1.4.1 | 1.4.2 | 1.4.3 | 1.4.4 | 1.4.5 | 1.4.6 | 1.4.7 | 1.4.8 | 1.4.9 | 1.4.10

3 vendors · 3 products

References

12 links

anonsvn.wireshark.org/viewvc?view=revision&revision=40167X Refsource CONFIRMPatch
www.openwall.com/lists/oss-security/2012/01/20/4Mailing ListX Refsource MLIST
secunia.com/advisories/54425Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2013-0125.htmlVendor AdvisoryX Refsource REDHAT
www.wireshark.org/security/wnpa-sec-2012-01.htmlX Refsource CONFIRMVendor Advisory
secunia.com/advisories/48947Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15192VDB EntrySignatureX Refsource OVAL
www.openwall.com/lists/oss-security/2012/01/11/7Mailing ListX Refsource MLIST
secunia.com/advisories/47494Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-201308-05.xmlVendor AdvisoryX Refsource GENTOO

Show all 12 references

bugs.wireshark.org/bugzilla/show_bug.cgi?id=6668X Refsource CONFIRMExploitPatch
security-tracker.debian.org/tracker/CVE-2012-0067Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities