CVE-2012-3825
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote...
CVE-2012-3825 is a low vulnerability (CVSS 3.3) in Wireshark, published June 30, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.31%, the 88th percentile. Fixed in wireshark 1.6.8-1.
- Severity
- 3.3 LowCVSS 2.0, NVD
- Exploit chance
- 3.31%EPSS, 88th percentile
- Exploitation
- None known1 public exploit
- Fixed in
1.6.8-1wireshark +14 more
Description
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 | before 1.6.8-1 | 1.6.8-1 |
wiresharkDebian:13 | before 1.6.8-1 | 1.6.8-1 |
wiresharkDebian:14 | before 1.6.8-1 | 1.6.8-1 |
wiresharkRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs | before 0:1.8.10-4.el6 | 0:1.8.10-4.el6 |
wireshark-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs | before 0:1.8.10-4.el6 | 0:1.8.10-4.el6 |
wireshark-develRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs | before 0:1.8.10-4.el6 | 0:1.8.10-4.el6 |
wireshark-gnomeRed Hat:enterprise_linux:6::client From an advisory covering 31 CVEs | before 0:1.8.10-4.el6 | 0:1.8.10-4.el6 |
wiresharkRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs | before 0:1.8.10-4.el6 | 0:1.8.10-4.el6 |
wireshark-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs | before 0:1.8.10-4.el6 | 0:1.8.10-4.el6 |
wireshark-develRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs | before 0:1.8.10-4.el6 | 0:1.8.10-4.el6 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wireshark-gnomeRed Hat:enterprise_linux:6::server From an advisory covering 31 CVEs | before 0:1.8.10-4.el6 | 0:1.8.10-4.el6 |
wiresharkRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs | before 0:1.8.10-4.el6 | 0:1.8.10-4.el6 |
wireshark-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs | before 0:1.8.10-4.el6 | 0:1.8.10-4.el6 |
wireshark-develRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs | before 0:1.8.10-4.el6 | 0:1.8.10-4.el6 |
wireshark-gnomeRed Hat:enterprise_linux:6::workstation From an advisory covering 31 CVEs | before 0:1.8.10-4.el6 | 0:1.8.10-4.el6 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Wireshark - Multiple Dissector Denial of Service Vulnerabilities | 2012-05-24 |
What each source reports
NVD Score used
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.
- Record
CVE-2012-3825- CVSS 2.0
- 3.3 Low
AV:A/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE ListNo score
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.
- Record
CVE-2012-3825- Updated
- 2026-11-02
EUVDEUVD-2012-3772No score
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.
- Record
EUVD-2012-3772- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w9xg-mh3r-5q8vNo score
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote...
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.
- Record
GHSA-w9xg-mh3r-5q8v- Updated
- 2026-11-02
OSVNo score
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.
- Record
CVE-2012-3825- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3825No score
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.
- Record
DEBIAN-CVE-2012-3825- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugs.wireshark.org/bugzilla/show_bug.cgi?id=7122
securitytracker.com/id?1027094
secunia.com/advisories/49226
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15478
wireshark.org/security/wnpa-sec-2012-08.html
Show 135 moreShow less
nvd.nist.gov/vuln/detail/CVE-2012-3825
github.com/advisories/GHSA-w9xg-mh3r-5q8v
security-tracker.debian.org/tracker/CVE-2012-3825
access.redhat.com/errata/RHSA-2013:1569
bugzilla.redhat.com/show_bug.cgi?id=659661
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1569.json
cve.org/CVERecord?id=CVE-2012-2392