CVE-2007-6119 — Wireshark vulnerability

12 documents6 sources
Severity
7.8HIGHNVD
NVD6.1OSV5.0
EPSS
3.7%
top 12.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
WiresharkDebian Wireshark
Timeline
PublishedNov 23
Latest updateMay 1

Description

The DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages3 packages

▶debiandebian/wireshark< wireshark 0.99.7-1 (bookworm)+1
▶Debianwireshark/wireshark< 0.99.7-1+7

Patches

Patch: www.securityfocus.com ↗Patch: www.wireshark.org ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-j2p4-5vr6-m8qq: The DCP ETSI dissector in Wireshark (formerly Ethereal) 0↗2022-05-01
▶
GHSA
GHSA-wv5g-77wr-363r: Wireshark (formerly Ethereal) 0↗2022-05-01
▶
OSV
CVE-2007-6439: Wireshark (formerly Ethereal) 0↗2007-12-19
▶
OSV
CVE-2007-6119: The DCP ETSI dissector in Wireshark (formerly Ethereal) 0↗2007-11-23
▶

📋Vendor Advisories

4
Red Hat
wireshark IPv6 and USB dissector crash↗2007-12-18
▶
Red Hat
wireshark DCP ETSI dissector flaws↗2007-11-22
▶
Debian
CVE-2007-6439: wireshark - Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial o...↗2007
▶
Debian
CVE-2007-6119: wireshark - The DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote att...↗2007
▶

💬Community

2
Bugzilla
CVE-2007-6439 wireshark IPv6 and USB dissector crash↗2008-01-02
▶
Bugzilla
CVE-2007-6119 wireshark DCP ETSI dissector flaws↗2007-11-23
▶