{"id":"DEBIAN-CVE-2012-5238","details":"epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.3 uses incorrect OUI data structures during the decoding of (1) PPP and (2) LCP data, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a malformed packet.","modified":"2026-09-23T06:47:29.299167823Z","published":"2012-10-04T19:55:00.917Z","upstream":["CVE-2012-5238"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2012-5238"}],"affected":[{"package":{"name":"wireshark","ecosystem":"Debian:12","purl":"pkg:deb/debian/wireshark?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-2"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2012-5238.json"}},{"package":{"name":"wireshark","ecosystem":"Debian:13","purl":"pkg:deb/debian/wireshark?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-2"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2012-5238.json"}},{"package":{"name":"wireshark","ecosystem":"Debian:14","purl":"pkg:deb/debian/wireshark?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-2"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2012-5238.json"}}],"schema_version":"1.9.0"}