Unrated severityNVD Advisory· Published Oct 4, 2012· Updated Apr 29, 2026

CVE-2012-5240

Description

Buffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malformed packet.

Affected products

Wireshark/Wireshark3 versions
cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.wireshark.org/security/wnpa-sec-2012-29.htmlnvdVendor Advisory
anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ldp.cnvd
anonsvn.wireshark.org/viewvcnvd
www.securityfocus.com/bid/55754nvd
www.securitytracker.com/idnvd
bugs.wireshark.org/bugzilla/show_bug.cginvd
bugs.wireshark.org/bugzilla/show_bug.cginvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15691nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000