CVE-2012-1594

Description

epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

How to fix CVE-2012-1594

To remediate CVE-2012-1594, upgrade the affected package to a fixed version below.

• Debian/wireshark—upgrade to 1.6.6-1 or later

Is CVE-2012-1594 being exploited?

Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1.6.6-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2012-1594