CVE-2012-3548

The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and...

4.3 MediumFix available

CVE-2012-3548 is a medium vulnerability (CVSS 4.3) in Wireshark, published August 30, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. Fixed in wireshark 1.8.2-2.

The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a small value for a certain length field in a capture file.

Exploit likelihood

1.55%Up 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2012-3548
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-3548
Updated: 2026-11-02

EUVDEUVD-2012-3495 No score

Record: EUVD-2012-3495
Updated: 2026-11-03

GitHub AdvisoriesGHSA-cj63-9m7p-vgfj No score

The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and...

Record: GHSA-cj63-9m7p-vgfj
Updated: 2026-11-02

OSV No score

Record: CVE-2012-3548
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-3548 No score

Record: DEBIAN-CVE-2012-3548
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10199-1 No score

wireshark-2.2.2-1.1 on GA media

These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10199-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2012-3548 No score

Record: UBUNTU-CVE-2012-3548
Updated: 2026-11-02

Affected products

wireshark

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Debian:12	before 1.8.2-2	1.8.2-2
`wireshark` Debian:13	before 1.8.2-2	1.8.2-2
`wireshark` Debian:14	before 1.8.2-2	1.8.2-2
`wireshark` openSUSE:Tumbleweed	before 2.2.2-1.1	2.2.2-1.1