CVE-2008-3140
Wireshark 1.0.0 - Multiple Denial of Service Vulnerabilities
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."
El analizador syslog de Wireshark (formerly Ethereal) 1.0.0, permite a atacantes remotos provocar una denegación de servicio (caída de apliación) a través de vectores no conocidos, posiblemente esté relacionada con un “paquete incompleto SS7 MSU syslog encapsulado”.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-06-30 First Exploit
- 2008-07-10 CVE Reserved
- 2008-07-10 CVE Published
- 2024-02-24 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (17)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/30942 | Third Party Advisory | |
| http://secunia.com/advisories/31085 | Third Party Advisory | |
| http://securitytracker.com/id?1020404 | Vdb Entry | |
| http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212 | X_refsource_confirm | |
| http://www.securityfocus.com/archive/1/493882/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/30020 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2008/1982/references | Vdb Entry | |
| http://www.wireshark.org/security/wnpa-sec-2008-03.html | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/43518 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14700 | Signature |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/32006 | 2008-06-30 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html | 2018-10-11 | |
| http://secunia.com/advisories/30886 | 2018-10-11 | |
| http://secunia.com/advisories/31378 | 2018-10-11 | |
| http://secunia.com/advisories/31687 | 2018-10-11 | |
| http://security.gentoo.org/glsa/glsa-200808-04.xml | 2018-10-11 | |
| https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html | 2018-10-11 |