The dissect_eigrp_metric_comm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service (integer overflow and infinite loop) via a malformed packet.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2012-12-05 11:57
Updated : 2024-02-04 18:16
NVD link : CVE-2012-6057
Mitre link : CVE-2012-6057
CVE.ORG link : CVE-2012-6057
JSON object : View
Products Affected
wireshark
- wireshark
CWE
CWE-189
Numeric Errors