Every CVE Search/ Get API key

CVE-2012-0041

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1...

4.3 MediumFix available

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demonstrated by an airopeek file.

Exploit likelihood

2.01%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demonstrated by an airopeek file.

Record
CVE-2012-0041
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demonstrated by an airopeek file.

Record
CVE-2012-0041
Updated
2026-11-02
EUVDEUVD-2012-0081 No score

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demonstrated by an airopeek file.

Record
EUVD-2012-0081
Updated
2026-11-03
GitHub AdvisoriesGHSA-6j5c-vcm6-qh7m No score

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1...

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demonstrated by an airopeek file.

Record
GHSA-6j5c-vcm6-qh7m
Weakness
CWE-20
Updated
2026-11-02
OSV No score

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demonstrated by an airopeek file.

Record
CVE-2012-0041
Updated
2026-11-02
OSVDEBIAN-CVE-2012-0041 No score

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demonstrated by an airopeek file.

Record
DEBIAN-CVE-2012-0041
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wireshark
Debian:12
 before 1.6.5-1
1.6.5-1
wireshark
Debian:13
 before 1.6.5-1
1.6.5-1
wireshark
Debian:14
 before 1.6.5-1
1.6.5-1
wireshark
Debian:6.0
 before 1.2.11-6+squeeze6, plus listed versions
1.2.11-61.2.11-6+squeeze11.2.11-6+squeeze21.2.11-6+squeeze41.2.11-6+squeeze5
1.2.11-6+squeeze6
wireshark
Red Hat:enterprise_linux:6::client
 before 0:1.2.15-2.el6_2.1
0:1.2.15-2.el6_2.1
wireshark-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.2.15-2.el6_2.1
0:1.2.15-2.el6_2.1
wireshark-devel
Red Hat:enterprise_linux:6::client
 before 0:1.2.15-2.el6_2.1
0:1.2.15-2.el6_2.1
wireshark-gnome
Red Hat:enterprise_linux:6::client
 before 0:1.2.15-2.el6_2.1
0:1.2.15-2.el6_2.1
wireshark
Red Hat:enterprise_linux:6::server
 before 0:1.2.15-2.el6_2.1
0:1.2.15-2.el6_2.1
wireshark-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.2.15-2.el6_2.1
0:1.2.15-2.el6_2.1
Show 14 moreShow less
Affected packages
PackageAffectedFixed
wireshark-devel
Red Hat:enterprise_linux:6::server
 before 0:1.2.15-2.el6_2.1
0:1.2.15-2.el6_2.1
wireshark-gnome
Red Hat:enterprise_linux:6::server
 before 0:1.2.15-2.el6_2.1
0:1.2.15-2.el6_2.1
wireshark
Red Hat:enterprise_linux:6::workstation
 before 0:1.2.15-2.el6_2.1
0:1.2.15-2.el6_2.1
wireshark-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.2.15-2.el6_2.1
0:1.2.15-2.el6_2.1
wireshark-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.2.15-2.el6_2.1
0:1.2.15-2.el6_2.1
wireshark-gnome
Red Hat:enterprise_linux:6::workstation
 before 0:1.2.15-2.el6_2.1
0:1.2.15-2.el6_2.1
wireshark
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.0.15-5.el5
0:1.0.15-5.el5
wireshark-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.0.15-5.el5
0:1.0.15-5.el5
wireshark-gnome
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.0.15-5.el5
0:1.0.15-5.el5
wireshark
Red Hat:enterprise_linux:5::client
 before 0:1.0.15-5.el5
0:1.0.15-5.el5
wireshark-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.0.15-5.el5
0:1.0.15-5.el5
wireshark
Red Hat:enterprise_linux:5::server
 before 0:1.0.15-5.el5
0:1.0.15-5.el5
wireshark-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.0.15-5.el5
0:1.0.15-5.el5
wireshark-gnome
Red Hat:enterprise_linux:5::server
 before 0:1.0.15-5.el5
0:1.0.15-5.el5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0041 is a medium vulnerability (CVSS 4.3) in Wireshark, published January 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.01%, the 80th percentile. Fixed in wireshark 1.6.5-1.

References

Show 93 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open