CVE-2007-6120

CWE-119 — Buffer Overflow7 documents7 sources
Severity
5.0MEDIUM
EPSS
3.2%
top 13.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Ethereal Group EtherealWireshark Wireshark
Timeline
PublishedNov 23
Latest updateMay 1

Description

The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages3 packages

▶Debianwireshark< 0.99.7~pre1-1+3
▶NVDwireshark/wireshark8 versions+7
▶NVDethereal_group/ethereal37 versions+36

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-hjvf-7vx2-frwx: The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0↗2022-05-01
▶
CVEList
CVE-2007-6120: The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0↗2007-11-23
▶
OSV
CVE-2007-6120: The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0↗2007-11-23
▶

📋Vendor Advisories

2
Red Hat
wireshark Bluetooth SDP dissector flaws↗2007-11-22
▶
Debian
CVE-2007-6120: wireshark - The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allow...↗2007
▶

💬Community

1
Bugzilla
CVE-2007-6120 wireshark Bluetooth SDP dissector flaws↗2007-11-23
▶