Red Hat Bugzilla – Bug 848568
CVE-2012-4297 wireshark: buffer overflow in GSM RLC MAC dissector (wnpa-sec-2012-19)
Last modified: 2014-09-03 05:24:54 EDT
It may be possible to make Wireshark crash, hang, or execute code by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
Affects 1.6.0 to 1.6.9, 1.8.0 to 1.8.1 and is fixed in upstream 1.8.2 and 1.6.10 versions.
Note: 1.0.x and 1.2.x do not provide the GSM RLC MAC dissector.
This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 5 and 6.
Created wireshark tracking bugs for this issue
Affects: fedora-all [bug 848593]
wireshark-1.6.10-1.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report.
wireshark-1.6.10-1.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report.