Improper input validation in Sun Sunos

CVE-2012-4295

Array index error in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service (application crash) via a crafted speed (aka rate) value.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.015 (71.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References