CVE-2012-2394
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not...
CVE-2012-2394 is a low vulnerability (CVSS 3.3) in Wireshark, published June 30, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.88%, the 90th percentile. Fixed in wireshark 1.6.8-1.
- Severity
- 3.3 LowCVSS 2.0, NVD
- Exploit chance
- 3.88%EPSS, 90th percentile
- Exploitation
- None known1 public exploit
- Fixed in
1.6.8-1wireshark +3 more
Description
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
Exploit likelihood
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Wireshark - Misaligned Memory Denial of Service | 2012-05-24 |
What each source reports
NVD Score used
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
- Record
CVE-2012-2394- CVSS 2.0
- 3.3 Low
AV:A/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
- Record
CVE-2012-2394- Updated
- 2026-11-02
EUVDEUVD-2012-2382No score
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
- Record
EUVD-2012-2382- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v655-fcfg-w756No score
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not...
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
- Record
GHSA-v655-fcfg-w756- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
- Record
CVE-2012-2394- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2394No score
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
- Record
DEBIAN-CVE-2012-2394- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10199-1No score
wireshark-2.2.2-1.1 on GA media
These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10199-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
mandriva.com/security/advisories?name=MDVSA-2012:015
anonsvn.wireshark.org/viewvc?view=revision&revision=42393
securitytracker.com/id?1027094
wireshark.org/security/wnpa-sec-2012-10.html
secunia.com/advisories/49226
Show 194 moreShow less
bugs.wireshark.org/bugzilla/show_bug.cgi?id=7221
securityfocus.com/bid/53653
nvd.nist.gov/vuln/detail/CVE-2012-2394
github.com/advisories/GHSA-v655-fcfg-w756
security-tracker.debian.org/tracker/CVE-2012-2394
suse.com/security/cve/CVE-2009-1210
Left out here: 74 references. The JSON record has them.