CVE-2007-3391

Published: Jun 26, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.

Affected (1)

Products: Wireshark: Wireshark

Wireshark

1 product

Wireshark

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 0.99.5

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (42)

http://osvdb.org/37641

Source: cve@mitre.org

http://secunia.com/advisories/25833

Source: cve@mitre.org

http://secunia.com/advisories/25987

Source: cve@mitre.org

http://secunia.com/advisories/26004

Source: cve@mitre.org

http://secunia.com/advisories/26499

Source: cve@mitre.org

http://secunia.com/advisories/28583

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200708-12.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:145

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_15_sr.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0709.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0710.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0059.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/24662

Source: cve@mitre.org

http://www.securitytracker.com/id?1018315

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2353

Source: cve@mitre.org

http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html

Source: cve@mitre.org

Patch

http://www.wireshark.org/security/wnpa-sec-2007-02.html

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35204

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1498

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911

Source: cve@mitre.org

http://osvdb.org/37641