Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-1fpb-yg2t-4kcb
Vulnerability ID VCID-1fpb-yg2t-4kcb
Aliases CVE-2012-5238
Summary wireshark: Application abort due to wrong variable type in PPP dissector
Status Published
Exploitability 0.5
Weighted Severity 3.0
Risk 1.5
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
Reference id Reference type URL
http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ppp.c?r1=42989&r2=42988&pathrev=42989
http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ppp.c?r1=44688&r2=44687&pathrev=44688
http://anonsvn.wireshark.org/viewvc?view=revision&revision=42989
http://anonsvn.wireshark.org/viewvc?view=revision&revision=44688
http://osvdb.org/85883
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5238.json
https://api.first.org/data/v1/epss?cve=CVE-2012-5238
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7316
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7668
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5238
https://exchange.xforce.ibmcloud.com/vulnerabilities/79010
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15593
http://www.securityfocus.com/bid/55754
http://www.securitytracker.com/id?1027604
http://www.wireshark.org/security/wnpa-sec-2012-27.html
689972 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=689972
862507 https://bugzilla.redhat.com/show_bug.cgi?id=862507
cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wireshark:wireshark:1.8.2:*:*:*:*:*:*:*
CVE-2012-5238 https://nvd.nist.gov/vuln/detail/CVE-2012-5238
No exploits are available.
Vector: AV:A/AC:L/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2012-5238
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete

Exploit Prediction Scoring System (EPSS)
Percentile 0.74855
EPSS Score 0.00851
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T14:54:03.069584+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5238.json 38.0.0