CVE-2007-6118

7 documents7 sources
Severity
7.8HIGH
EPSS
4.9%
top 10.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Ethereal Group EtherealWireshark Wireshark
Timeline
PublishedNov 23
Latest updateMay 1

Description

The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages3 packages

▶Debianwireshark< 0.99.7~pre1-1+3
▶NVDwireshark/wireshark8 versions+7
▶NVDethereal_group/ethereal4 versions+3

Patches

Patch: www.securityfocus.com ↗Patch: www.wireshark.org ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-8h72-qf2q-h5jc: The MEGACO dissector in Wireshark (formerly Ethereal) 0↗2022-05-01
▶
OSV
CVE-2007-6118: The MEGACO dissector in Wireshark (formerly Ethereal) 0↗2007-11-23
▶
CVEList
CVE-2007-6118: The MEGACO dissector in Wireshark (formerly Ethereal) 0↗2007-11-23
▶

📋Vendor Advisories

2
Red Hat
wireshark MEGACO dissector flaws↗2007-11-22
▶
Debian
CVE-2007-6118: wireshark - The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows re...↗2007
▶

💬Community

1
Bugzilla
CVE-2007-6118 wireshark MEGACO dissector flaws↗2007-11-23
▶