4.3
CVSSv2

CVE-2008-1563

Published: 31/03/2008 Updated: 11/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 up to and including 0.99.8 allows remote malicious users to cause a denial of service (application crash) via a malformed packet.

Vulnerable Product Search on Vulmon Subscribe to Product

wireshark wireshark 0.99.4

wireshark wireshark 0.99.5

wireshark wireshark 0.99.8

wireshark wireshark 0.99.6

wireshark wireshark 0.99.7

wireshark wireshark 0.99.2

wireshark wireshark 0.99.3

Vendor Advisories

Synopsis Moderate: wireshark security update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 3, 4, and 5This update has been rated as having moderate security impact by the RedHat Security Response Tea ...
Debian Bug report logs - #452381 wireshark: multiple security issues CVE-2007-6111 - CVE-2007-6121 Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Thu, 22 Nov 2007 12:33:03 U ...

Exploits

source: wwwsecurityfocuscom/bid/28485/info Wireshark is prone to multiple denial-of-service vulnerabilities Exploiting these issues may allow attackers to cause crashes and deny service to legitimate users of the application Attackers may be able to leverage some of these vulnerabilities to execute arbitrary code, but this has not ...