CVE-2012-6054: The dissect_sflow_245_address_type function in epan/dissectors/packet-sflow.c in the sFlow dissector in Wir...

Security readout for executives and security teams

This is a Wireshark denial-of-service issue in the sFlow dissector. A malformed sFlow packet with an invalid IP address type could make vulnerable Wireshark 1.8.x versions loop indefinitely while analyzing traffic. The main business impact is disruption to analysts or systems that rely on Wireshark for packet inspection, not confirmed data theft or code execution. Exposure is likely limited to environments running Wireshark 1.8.x before 1.8.4, or distribution packages based on those vulnerable builds, where users or automation open untrusted packet captures or inspect live traffic containing sFlow records. Treat this as a targeted operational reliability issue. It is old and not KEV-listed, but vulnerable packet-analysis systems can be stalled by malformed traffic. Remediate during normal vulnerability maintenance unless exposed analysis workflows still use affected Wireshark versions. Mitigation focus: Upgrade Wireshark 1.8.x installations to 1.8.4 or later.; Apply vendor distribution updates where Wireshark is managed by the operating system.; Check Wireshark and OS vendor advisories for supported fixed package versions..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.