Skip to content

CVE-2012-0067

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers...

4.3 MediumPublic exploitFix available

CVE-2012-0067 is a medium vulnerability (CVSS 4.3) in Wireshark, published January 27, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.52%, the 93rd percentile. Fixed in wireshark 1.6.5-1.

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

Exploit likelihood

6.52%Down 7.1 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

Record: CVE-2012-0067
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

Record: CVE-2012-0067
Updated: 2026-11-02

EUVDEUVD-2012-0105 No score

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

Record: EUVD-2012-0105
Updated: 2026-11-03

GitHub AdvisoriesGHSA-33pw-6955-4qx6 No score

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers...

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

Record: GHSA-33pw-6955-4qx6
Weakness: CWE-20
Updated: 2026-11-02

OSV No score

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

Record: CVE-2012-0067
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-0067 No score

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

Record: DEBIAN-CVE-2012-0067
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Debian:12	before 1.6.5-1	1.6.5-1
`wireshark` Debian:13	before 1.6.5-1	1.6.5-1
`wireshark` Debian:14	before 1.6.5-1	1.6.5-1
`wireshark` Debian:6.0	before 1.2.11-6+squeeze6, plus listed versions 1.2.11-61.2.11-6+squeeze11.2.11-6+squeeze21.2.11-6+squeeze41.2.11-6+squeeze5	1.2.11-6+squeeze6
`wireshark` Red Hat:enterprise_linux:6::client	before 0:1.2.15-2.el6_2.1	0:1.2.15-2.el6_2.1
`wireshark-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.2.15-2.el6_2.1	0:1.2.15-2.el6_2.1
`wireshark-devel` Red Hat:enterprise_linux:6::client	before 0:1.2.15-2.el6_2.1	0:1.2.15-2.el6_2.1
`wireshark-gnome` Red Hat:enterprise_linux:6::client	before 0:1.2.15-2.el6_2.1	0:1.2.15-2.el6_2.1
`wireshark` Red Hat:enterprise_linux:6::server	before 0:1.2.15-2.el6_2.1	0:1.2.15-2.el6_2.1
`wireshark-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.2.15-2.el6_2.1	0:1.2.15-2.el6_2.1

Show 14 moreShow less

Affected packages
Package	Affected	Fixed
`wireshark-devel` Red Hat:enterprise_linux:6::server	before 0:1.2.15-2.el6_2.1	0:1.2.15-2.el6_2.1
`wireshark-gnome` Red Hat:enterprise_linux:6::server	before 0:1.2.15-2.el6_2.1	0:1.2.15-2.el6_2.1
`wireshark` Red Hat:enterprise_linux:6::workstation	before 0:1.2.15-2.el6_2.1	0:1.2.15-2.el6_2.1
`wireshark-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.2.15-2.el6_2.1	0:1.2.15-2.el6_2.1
`wireshark-devel` Red Hat:enterprise_linux:6::workstation	before 0:1.2.15-2.el6_2.1	0:1.2.15-2.el6_2.1
`wireshark-gnome` Red Hat:enterprise_linux:6::workstation	before 0:1.2.15-2.el6_2.1	0:1.2.15-2.el6_2.1
`wireshark` Red Hat:enterprise_linux:5::client_workstation	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark-gnome` Red Hat:enterprise_linux:5::client_workstation	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark` Red Hat:enterprise_linux:5::client	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark-debuginfo` Red Hat:enterprise_linux:5::client	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark` Red Hat:enterprise_linux:5::server	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark-debuginfo` Red Hat:enterprise_linux:5::server	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark-gnome` Red Hat:enterprise_linux:5::server	before 0:1.0.15-5.el5	0:1.0.15-5.el5

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Wireshark - Buffer Underflow / Denial of Service	2012-01-10

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References

Show 93 moreShow less