CVE-2012-4289: epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, an...

Security readout for executives and security teams

This is a denial-of-service flaw in older Wireshark AFP packet parsing. A crafted or abnormal AFP packet with many ACL entries could make Wireshark loop and consume CPU. The main business risk is disruption to analysts or automated packet-processing systems using affected Wireshark releases. Exposure is most likely where legacy Wireshark or TShark versions process AFP network traffic or untrusted capture files. Internet-facing services are not the primary concern unless they feed traffic into affected analysis tooling. Treat as a targeted operational resilience issue, not a broad system compromise risk. Prioritize remediation on security operations, forensics, and network-analysis systems still running affected legacy Wireshark versions. Mitigation focus: Upgrade Wireshark to 1.4.15, 1.6.10, 1.8.2, or later.; Apply operating-system vendor Wireshark security updates where bundled packages are used.; Avoid processing untrusted capture files on legacy analysis workstations..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.