CVE-2008-3140
Wireshark 1.0.0 - Multiple Denial of Service Vulnerabilities
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."
El analizador syslog de Wireshark (formerly Ethereal) 1.0.0, permite a atacantes remotos provocar una denegación de servicio (caída de apliación) a través de vectores no conocidos, posiblemente esté relacionada con un “paquete incompleto SS7 MSU syslog encapsulado”.
Multiple vulnerabilities related to memory management were discovered in the GSM SMS dissector (CVE-2008-3137), the PANA and KISMET dissectors (CVE-2008-3138), the RTMPT dissector (CVE-2008-3139), the syslog dissector (CVE-2008-3140) and the RMI dissector (CVE-2008-3141) and when reassembling fragmented packets (CVE-2008-3145). Versions less than 1.0.2 are affected.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2008-07-10 CVE Reserved
- 2008-07-10 CVE Published
- 2014-03-03 First Exploit
- 2024-08-07 CVE Updated
- 2025-07-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (17)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/30942 | Third Party Advisory | |
| http://secunia.com/advisories/31085 | Third Party Advisory | |
| http://securitytracker.com/id?1020404 | Vdb Entry | |
| http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212 | X_refsource_confirm | |
| http://www.securityfocus.com/archive/1/493882/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/30020 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2008/1982/references | Vdb Entry | |
| http://www.wireshark.org/security/wnpa-sec-2008-03.html | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/43518 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14700 | Signature |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/32006 | 2014-03-03 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html | 2018-10-11 | |
| http://secunia.com/advisories/30886 | 2018-10-11 | |
| http://secunia.com/advisories/31378 | 2018-10-11 | |
| http://secunia.com/advisories/31687 | 2018-10-11 | |
| http://security.gentoo.org/glsa/glsa-200808-04.xml | 2018-10-11 | |
| https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html | 2018-10-11 |