CVE-2012-2394
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not...
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
Exploit likelihood
What each source reports
NVD Score used
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
- Record
CVE-2012-2394- CVSS 2.0
- 3.3 Low
AV:A/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
- Record
CVE-2012-2394- Updated
- 2026-11-02
EUVDEUVD-2012-2382 No score
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
- Record
EUVD-2012-2382- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v655-fcfg-w756 No score
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not...
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
- Record
GHSA-v655-fcfg-w756- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
- Record
CVE-2012-2394- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2394 No score
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
- Record
DEBIAN-CVE-2012-2394- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10199-1 No score
wireshark-2.2.2-1.1 on GA media
These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10199-1- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Wireshark - Misaligned Memory Denial of Service | 2012-05-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2394 is a low vulnerability (CVSS 3.3) in Wireshark, published June 30, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.88%, the 90th percentile. Fixed in wireshark 1.6.8-1.
References
mandriva.com/security/advisories?name=MDVSA-2012:015
anonsvn.wireshark.org/viewvc?view=revision&revision=42393
securitytracker.com/id?1027094
wireshark.org/security/wnpa-sec-2012-10.html
secunia.com/advisories/49226
Show 194 moreShow less
bugs.wireshark.org/bugzilla/show_bug.cgi?id=7221
securityfocus.com/bid/53653
nvd.nist.gov/vuln/detail/CVE-2012-2394
github.com/advisories/GHSA-v655-fcfg-w756
security-tracker.debian.org/tracker/CVE-2012-2394
suse.com/security/cve/CVE-2009-1210
Left out here: 74 references. The JSON record has them.