wnpa-sec-2012-12 · Large loop in the NFS dissector

Summary

Name: Large loop in the NFS dissector

Docid: wnpa-sec-2012-12

Date: July 22, 2012

Affected versions: 1.4.0 to 1.4.13, 1.6.0 to 1.6.8, 1.8.0

Fixed versions: 1.8.1, 1.6.9, 1.4.14

References: Wireshark bug 7436
CVE-2012-4049

Details

Description

The NFS dissector could use excessive amounts of CPU.

Impact

It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

Resolution

Upgrade to Wireshark 1.8.1, 1.6.9, 1.4.14 or later.

Enhance Wireshark

Troubleshoot your Network

Free 30 day trial

Free 30 day trial

  • Save hours on network and application issue diagnoses
  • Monitor physical and virtual environments
  • GUI packet capture and analysis
  • Fully integrated with Wireshark

Try Cascade Shark VE & Cascade Pilot Free for 30 Days

802.11 Packet Capture

Riverbed AirPcap
  • WLAN packet capture and transmission
  • Full 802.11 a/b/g/n support
  • View management, control and data frames
  • Multi-channel aggregation (with multiple adapters)

Learn More

Buy Now

Packet Analysis Made Easy

    Cascade Pilot Personal Edition graphs
  • Visually rich, powerful LAN analyzer
  • Quickly access very large pcap files
  • Professional, customizable reports
  • Advanced triggers and alerts
  • Fully integrated with Wireshark

Try Cascade Pilot PE FREE for 10 days

Buy Now