CVE-2012-4294

Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c...

5.8 MediumFix available

CVE-2012-4294 is a medium vulnerability (CVSS 5.8) in Wireshark, published August 16, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.31%, the 88th percentile. Fixed in wireshark 1.8.2-1.

Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed (aka rate) value.

Exploit likelihood

3.31%Down 8.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.8

Record: CVE-2012-4294
CVSS 2.0: 5.8 MediumAV:A/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-4294
Updated: 2026-11-02

EUVDEUVD-2012-4238 No score

Record: EUVD-2012-4238
Updated: 2026-11-03

GitHub AdvisoriesGHSA-24mr-g54h-5fgj No score

Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c...

Record: GHSA-24mr-g54h-5fgj
Weakness: CWE-119
Updated: 2026-11-02

OSV No score

Record: CVE-2012-4294
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-4294 No score

Record: DEBIAN-CVE-2012-4294
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10199-1 No score

wireshark-2.2.2-1.1 on GA media

These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10199-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2012-4294 No score

Record: UBUNTU-CVE-2012-4294
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Debian:12	before 1.8.2-1	1.8.2-1
`wireshark` Debian:13	before 1.8.2-1	1.8.2-1
`wireshark` Debian:14	before 1.8.2-1	1.8.2-1
`wireshark` openSUSE:Tumbleweed	before 2.2.2-1.1	2.2.2-1.1