CVE-2012-3826

LOW 3.3CVE-2012-3826 · Published 30/06/2012 · updated 16/06/2026

In short

CVE-2012-3826 is a LOW (CVSS 3.3) vulnerability affecting wireshark (wireshark).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 88.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wireshark wireshark	`= 1.4.0= 1.4.1= 1.4.10= 1.4.11= 1.4.12= 1.4.13= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.4.7= 1.4.8= 1.4.9= 1.6.0= 1.6.1= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.6.7`	No fix yet

Description

Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (loop) via vectors related to the R3 dissector, a different vulnerability than CVE-2012-2392.

References

secunia.com/advisories/49226
securitytracker.com/id
wireshark.org/security/wnpa-sec-2012-08.html · Vendor Advisory
bugs.wireshark.org/bugzilla/show_bug.cgi · Vendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15536

More vulnerabilities in wireshark

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wireshark

= 1.4.0= 1.4.1= 1.4.10= 1.4.11= 1.4.12= 1.4.13= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.4.7= 1.4.8= 1.4.9= 1.6.0= 1.6.1= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.6.7

No fix yet

More vulnerabilities in wireshark

See all →