CVE-2012-4286

The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark...

4.3 MediumFix available

CVE-2012-4286 is a medium vulnerability (CVSS 4.3) in Wireshark, published August 16, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.75%, the 77th percentile. Fixed in wireshark 1.8.2-1.

The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted pcap-ng file.

Exploit likelihood

1.75%Down 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2012-4286
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-189
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-4286
Updated: 2026-11-02

EUVDEUVD-2012-4230 No score

Record: EUVD-2012-4230
Updated: 2026-11-03

GitHub AdvisoriesGHSA-545q-cmj3-26f6 No score

The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark...

Record: GHSA-545q-cmj3-26f6
Updated: 2026-11-02

OSV No score

Record: CVE-2012-4286
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-4286 No score

Record: DEBIAN-CVE-2012-4286
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10199-1 No score

wireshark-2.2.2-1.1 on GA media

These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10199-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Debian:12	before 1.8.2-1	1.8.2-1
`wireshark` Debian:13	before 1.8.2-1	1.8.2-1
`wireshark` Debian:14	before 1.8.2-1	1.8.2-1
`wireshark` openSUSE:Tumbleweed	before 2.2.2-1.1	2.2.2-1.1