CVE-2012-4287: epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attac...

Security readout for executives and security teams

This issue can make vulnerable Wireshark versions consume CPU and hang while dissecting crafted MongoDB/BSON traffic. It affects Wireshark 1.8.x before 1.8.2. The known impact is denial of service to the analysis tool, not data theft or system takeover. Exposure is likely limited to hosts running Wireshark 1.8.x before 1.8.2 that parse MongoDB traffic or packet captures containing MongoDB protocol data. The source bundle does not identify affected downstream appliances beyond vendor package advisories. Handle through vulnerability management, not emergency incident response. Upgrade or remove obsolete Wireshark builds, especially in SOC and engineering environments that process untrusted captures. No source in the bundle supports active exploitation or broader compromise. Mitigation focus: Upgrade Wireshark 1.8.x installations to 1.8.2 or a vendor-fixed package.; Follow Wireshark and operating-system vendor advisories for supported fixed versions.; Avoid analyzing untrusted MongoDB packet captures with vulnerable Wireshark versions..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.