Red Hat Bugzilla – Bug 836960
CVE-2012-3825 wireshark: Integer overflows in BACapp and Bluetooth HCI dissectors, leading to DoS (wnpa-sec-2012-08)
Last modified: 2016-03-04 06:54:16 EST
Common Vulnerabilities and Exposures assigned an identifier CVE-2012-3825 to the following vulnerability:
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.
There are essentially two issues in this CVE, one dealing with BACapp and the other with Bluetooth HCI. The Bluetooth HCI dissector issue affects Red Hat Enterprise Linux 6.
This issue has been addressed in following products:
Red Hat Enterprise Linux 6
Via RHSA-2013:1569 https://rhn.redhat.com/errata/RHSA-2013-1569.html
RHEL-5 is affected by the HCI Bluetooth variant of the bug.
Red Hat Enterprise Linux 5 is currently in Phase 3 of its life cycle, during which only Critical impact security issues are expected to get fixed. This Low impact issue will not be considered for exception.