CVE-2012-6061: The dissect_wtp_common function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark 1.6.x bef...

Security readout for executives and security teams

This is a denial-of-service flaw in older Wireshark WTP packet parsing. A crafted packet can make Wireshark loop indefinitely or overflow a length calculation, disrupting analysts using vulnerable versions. The sources do not indicate data theft, code execution, or confirmed exploitation in the wild. Exposure is most likely on analyst workstations, packet-analysis systems, or automated tooling running vulnerable Wireshark versions and processing untrusted WTP traffic or capture files. Treat this as a focused operational stability issue. Patch vulnerable Wireshark installations, especially where analysts handle untrusted captures. Business urgency is lower than code execution flaws but relevant to incident-response readiness. Mitigation focus: Upgrade Wireshark to 1.6.12, 1.8.4, or a later supported release.; Apply relevant vendor packages from Red Hat, SUSE, or your distribution.; Avoid opening untrusted captures with vulnerable Wireshark versions until patched..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.