CVE-2007-6439 — Wireshark vulnerability

6 documents6 sources
Severity
6.1MEDIUMNVD
OSV5.0
EPSS
1.3%
top 19.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
WiresharkDebian Wireshark
Timeline
PublishedDec 19
Latest updateMay 1

Description

Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite or large loop) via the (1) IPv6 or (2) USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by CVE-2007-6116. The DCP ETSI issue is already covered by CVE-2007-6119.

CVSS vector

AV:A/AC:L/C:N/I:N/A:CExploitability: 6.5 | Impact: 6.9

Affected Packages3 packages

▶debiandebian/wireshark< wireshark 0.99.7-1 (bookworm)
▶Debianwireshark/wireshark< 0.99.7-1+3

🔴Vulnerability Details

2
GHSA
GHSA-wv5g-77wr-363r: Wireshark (formerly Ethereal) 0↗2022-05-01
▶
OSV
CVE-2007-6439: Wireshark (formerly Ethereal) 0↗2007-12-19
▶

📋Vendor Advisories

2
Red Hat
wireshark IPv6 and USB dissector crash↗2007-12-18
▶
Debian
CVE-2007-6439: wireshark - Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial o...↗2007
▶

💬Community

1
Bugzilla
CVE-2007-6439 wireshark IPv6 and USB dissector crash↗2008-01-02
▶