The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Aug 30, 2017 | Feb 27, 2016 |
| Debian | — | Upgrade wireshark | Mar 14, 2016 | Feb 27, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 24, 2016 |
| Freebsd | — | Upgrade wireshark-liteUpgrade tsharkUpgrade wireshark-qt5Upgrade tshark-liteUpgrade wireshark | Dec 10, 2025 | Mar 1, 2016 |
| Gentoo Linux | — | Upgrade net-analyzer/wireshark. | Oct 30, 2017 | Feb 27, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade wiresharkUpgrade wireshark-gnome | Dec 4, 2019 | Feb 28, 2016 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark to version 1.12.10-0.175.3.7.0.3.0 on Solaris 11.3Upgrade diagnostic/wireshark/wireshark-common to version 1.12.10-0.175.3.7.0.3.0 on Solaris 11.3Upgrade diagnostic/wireshark/tshark to version 1.12.10-0.175.3.7.0.3.0 on Solaris 11.3 | May 29, 2017 | Feb 27, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2016 |
| Suse | — | Upgrade libwiretap6Upgrade libwireshark9Upgrade libwsutil11Upgrade libwiretap7Upgrade libwiretap10Upgrade libwsutil7Upgrade libwireshark8Upgrade libwireshark13Upgrade libwscodecs1Upgrade wireshark-develUpgrade libwsutil8Upgrade wiresharkUpgrade wireshark-ui-qtUpgrade wireshark-gtk | Mar 8, 2016 | Feb 27, 2016 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Feb 28, 2016 |
| Wireshark | — | Upgrade to Wireshark version 2.0.2Upgrade to Wireshark version 1.12.10 | Oct 4, 2017 | Feb 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub