Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-4684
HistoryOct 22, 2008 - 6:00 p.m.

CVE-2008-4684

2008-10-2218:00:01
CWE-399
[email protected]
web.nvd.nist.gov
35
cve-2008-4684
wireshark
packet-frame
post dissectors
denial of service
application crash
prp
mate
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.003

Percentile

71.4%

JSON

packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service (application crash) via a certain series of packets, as demonstrated by enabling the (1) PRP or (2) MATE post dissector.

Affected configurations

NVD
Node
wiresharkwiresharkMatch0.99.2
OR
wiresharkwiresharkMatch0.99.3
OR
wiresharkwiresharkMatch0.99.4
OR
wiresharkwiresharkMatch0.99.5
OR
wiresharkwiresharkMatch0.99.6
OR
wiresharkwiresharkMatch0.99.6a
OR
wiresharkwiresharkMatch0.99.7
OR
wiresharkwiresharkMatch0.99.8
OR
wiresharkwiresharkMatch1.0
OR
wiresharkwiresharkMatch1.0.0
OR
wiresharkwiresharkMatch1.0.1
OR
wiresharkwiresharkMatch1.0.2
OR
wiresharkwiresharkMatch1.0.3
VendorProductVersionCPE
wiresharkwireshark0.99.8cpe:/a:wireshark:wireshark:0.99.8:::
wiresharkwireshark1.0cpe:/a:wireshark:wireshark:1.0:::
wiresharkwireshark1.0.3cpe:/a:wireshark:wireshark:1.0.3:::
wiresharkwireshark0.99.4cpe:/a:wireshark:wireshark:0.99.4:::
wiresharkwireshark0.99.7cpe:/a:wireshark:wireshark:0.99.7:::
wiresharkwireshark0.99.6acpe:/a:wireshark:wireshark:0.99.6a:::
wiresharkwireshark1.0.0cpe:/a:wireshark:wireshark:1.0.0:::
wiresharkwireshark0.99.6cpe:/a:wireshark:wireshark:0.99.6:::
wiresharkwireshark1.0.1cpe:/a:wireshark:wireshark:1.0.1:::
wiresharkwireshark0.99.2cpe:/a:wireshark:wireshark:0.99.2:::
Rows per page:
1-10 of 131

Related

ubuntucve 1
nvd 1
veracode 1
cvelist 1
debiancve 1
prion 1
altlinux 1
openvas 24
securityvulns 2
nessus 10
debian 1
osv 1
oraclelinux 1
redhat 1
centos 1
gentoo 1
ubuntucve
ubuntucve
CVE-2008-4684
2008-10-22 00:00:00
nvd
nvd
CVE-2008-4684
2008-10-22 18:00:01
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:29:47
cvelist
cvelist
CVE-2008-4684
2008-10-22 17:00:00
debiancve
debiancve
CVE-2008-4684
2008-10-22 18:00:01
prion
prion
Code injection
2008-10-22 18:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package wireshark version 1.0.4-alt1
2008-10-24 00:00:00
openvas
openvas
Mandriva Update for wireshark MDVSA-2008:215 (wireshark)
2009-04-09 00:00:00
Wireshark Multiple Vulnerabilities - Oct08 (Windows)
2008-10-24 00:00:00
Mandriva Update for wireshark MDVSA-2008:215 (wireshark)
2009-04-09 00:00:00
securityvulns
securityvulns
[ MDVSA-2008:215 ] wireshark
2008-10-29 00:00:00
Wireshark sniffer multiple security vulnerabilities
2008-10-29 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : wireshark (MDVSA-2008:215)
2009-04-23 00:00:00
openSUSE 10 Security Update : wireshark (wireshark-5783)
2008-12-01 00:00:00
openSUSE 10 Security Update : wireshark (wireshark-5886)
2008-12-26 00:00:00
debian
debian
[SECURITY] [DSA 1673-1] New wireshark packages fix several vulnerabilities
2008-11-29 23:07:40
osv
osv
wireshark - several vulnerabilities
2008-11-29 00:00:00
oraclelinux
oraclelinux
wireshark security update
2009-03-04 00:00:00
redhat
redhat
(RHSA-2009:0313) Moderate: wireshark security update
2009-03-04 00:00:00
centos
centos
wireshark security update
2009-03-04 23:33:43
gentoo
gentoo
Wireshark: Multiple vulnerabilities
2009-06-30 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.003

Percentile

71.4%

JSON
Related for CVE-2008-4684
ubuntucve1nvd1veracode1cvelist1debiancve1prion1altlinux1openvas24securityvulns2nessus10debian1osv1oraclelinux1redhat1centos1gentoo1