CVE-2012-4292: The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x...

Security readout for executives and security teams

This vulnerability can crash vulnerable Wireshark versions when they process a malformed STUN packet. The business impact is disruption to packet analysis, incident response, or troubleshooting workflows, not documented data theft or remote code execution in the supplied sources. Exposure is most likely where analysts, SOC teams, or administrators run affected Wireshark versions and inspect live traffic or packet captures containing STUN data. Server-side exposure is not indicated by the supplied sources. Prioritize remediation on security operations and network engineering systems that handle untrusted captures. This is a workflow availability risk, especially during incident response, but supplied evidence does not support critical urgency. Mitigation focus: Upgrade Wireshark to 1.4.15, 1.6.10, 1.8.2, or later.; Apply vendor-provided OS package updates where Wireshark is managed by distribution packages.; Avoid opening untrusted packet captures with affected Wireshark versions..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.