CVE-2012-6062: The dissect_rtcp_app function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x bef...

Security readout for executives and security teams

A crafted RTCP packet can make affected Wireshark versions stop responding because the RTCP dissector enters an infinite loop. This is a denial-of-service issue against packet-analysis workflows, not evidence of data theft or system takeover in the supplied sources. Exposure is most likely on analyst workstations, packet-capture systems, or appliances running vulnerable Wireshark builds and processing live traffic or untrusted capture files containing RTCP packets. Treat this as a targeted availability risk for network investigation tooling. Prioritize remediation where Wireshark handles untrusted captures or live network traffic, but do not treat it as critical without additional exploitation evidence. Mitigation focus: Upgrade Wireshark to 1.6.12, 1.8.4, or a later vendor-supported release.; Apply relevant Red Hat or openSUSE package advisories where those distributions manage Wireshark.; Avoid processing untrusted RTCP captures on vulnerable versions until upgraded..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.