CVE-2008-3145

Published: Jul 16, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read.

Affected (14)

Products: Wireshark: Wireshark

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 0.8.19
Wireshark Wireshark	Version 0.99.0
Wireshark Wireshark	Version 0.99.1
Wireshark Wireshark	Version 0.99.2
Wireshark Wireshark	Version 0.99.3
Wireshark Wireshark	Version 0.99.4
Wireshark Wireshark	Version 0.99.5
Wireshark Wireshark	Version 0.99.6
Wireshark Wireshark	Version 0.99.6a
Wireshark Wireshark	Version 0.99.7
Wireshark Wireshark	Version 0.99.8
Wireshark Wireshark	Version 1.0.0
Wireshark Wireshark	Version 1.0.1
Wireshark Wireshark	Version 1.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (54)

http://anonsvn.wireshark.org/viewvc/index.py?view=rev&revision=25343

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

Source: cve@mitre.org

http://secunia.com/advisories/31044

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/31085

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31257

Source: cve@mitre.org

http://secunia.com/advisories/31378

Source: cve@mitre.org

http://secunia.com/advisories/31687

Source: cve@mitre.org

http://secunia.com/advisories/32091

Source: cve@mitre.org

http://secunia.com/advisories/32944

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200808-04.xml

Source: cve@mitre.org

http://securitytracker.com/id?1020471

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm

Source: cve@mitre.org

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0237

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1673

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:152

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0890.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/494859/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/30181

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2057/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2773

Source: cve@mitre.org

http://www.wireshark.org/security/wnpa-sec-2008-04.html

Source: cve@mitre.org

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2470

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=454984

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/43719

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-2684

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9020

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html

Source: cve@mitre.org

http://anonsvn.wireshark.org/viewvc/index.py?view=rev&revision=25343

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31044

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/31085

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/31257

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31378

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31687

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32091

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32944

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200808-04.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1020471

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0237

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1673

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:152

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0890.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/494859/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/30181

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2057/references

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2773

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2008-04.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2470

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=454984

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/43719

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-2684

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9020

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.