CVE-2012-4289

epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before...

3.3 LowFix available

CVE-2012-4289 is a low vulnerability (CVSS 3.3) in Wireshark, published August 16, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.29%, the 70th percentile. Fixed in wireshark 1.8.2-1.

epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large number of ACL entries.

Exploit likelihood

1.29%Down 2.5 points since Feb 4, 2022

What each source reports

NVD Score used 3.3

Record: CVE-2012-4289
CVSS 2.0: 3.3 LowAV:A/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-4289
Updated: 2026-11-02

EUVDEUVD-2012-4233 No score

Record: EUVD-2012-4233
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mp4g-mxp3-v6g5 No score

epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before...

Record: GHSA-mp4g-mxp3-v6g5
Updated: 2026-11-02

OSV No score

Record: CVE-2012-4289
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-4289 No score

Record: DEBIAN-CVE-2012-4289
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10199-1 No score

wireshark-2.2.2-1.1 on GA media

These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10199-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2012-4289 No score

Record: UBUNTU-CVE-2012-4289
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Debian:12	before 1.8.2-1	1.8.2-1
`wireshark` Debian:13	before 1.8.2-1	1.8.2-1
`wireshark` Debian:14	before 1.8.2-1	1.8.2-1
`wireshark` Red Hat:enterprise_linux:5::client_workstation	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark-gnome` Red Hat:enterprise_linux:5::client_workstation	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark` Red Hat:enterprise_linux:5::client	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark-debuginfo` Red Hat:enterprise_linux:5::client	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark` Red Hat:enterprise_linux:5::server	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark-debuginfo` Red Hat:enterprise_linux:5::server	before 0:1.0.15-5.el5	0:1.0.15-5.el5

Show 14 moreShow less

Affected packages
Package	Affected	Fixed
`wireshark-gnome` Red Hat:enterprise_linux:5::server	before 0:1.0.15-5.el5	0:1.0.15-5.el5
`wireshark` Red Hat:enterprise_linux:6::client	before 0:1.8.10-4.el6	0:1.8.10-4.el6
`wireshark-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.8.10-4.el6	0:1.8.10-4.el6
`wireshark-devel` Red Hat:enterprise_linux:6::client	before 0:1.8.10-4.el6	0:1.8.10-4.el6
`wireshark-gnome` Red Hat:enterprise_linux:6::client	before 0:1.8.10-4.el6	0:1.8.10-4.el6
`wireshark` Red Hat:enterprise_linux:6::server	before 0:1.8.10-4.el6	0:1.8.10-4.el6
`wireshark-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.8.10-4.el6	0:1.8.10-4.el6
`wireshark-devel` Red Hat:enterprise_linux:6::server	before 0:1.8.10-4.el6	0:1.8.10-4.el6
`wireshark-gnome` Red Hat:enterprise_linux:6::server	before 0:1.8.10-4.el6	0:1.8.10-4.el6
`wireshark` Red Hat:enterprise_linux:6::workstation	before 0:1.8.10-4.el6	0:1.8.10-4.el6
`wireshark-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.8.10-4.el6	0:1.8.10-4.el6
`wireshark-devel` Red Hat:enterprise_linux:6::workstation	before 0:1.8.10-4.el6	0:1.8.10-4.el6
`wireshark-gnome` Red Hat:enterprise_linux:6::workstation	before 0:1.8.10-4.el6	0:1.8.10-4.el6
`wireshark` openSUSE:Tumbleweed	before 2.2.2-1.1	2.2.2-1.1