Vulnerability-Lookup

CVE-2007-3391 (GCVE-0-2007-3391)

Vulnerability from cvelistv5 – Published: 2007-06-26 00:00 – Updated: 2024-08-07 14:14

Summary

Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/25833	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.redhat.com/support/errata/RHSA-2008-00…	vendor-advisoryx_refsource_REDHAT
http://www.wireshark.org/security/wnpa-sec-2007-02.html	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2007-07…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/26499	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25987	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26004	third-party-advisoryx_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200708-12.xml	vendor-advisoryx_refsource_GENTOO
http://www.redhat.com/support/errata/RHSA-2007-07…	vendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.securitytracker.com/id?1018315	vdb-entryx_refsource_SECTRACK
https://issues.rpath.com/browse/RPL-1498	x_refsource_CONFIRM
http://www.securityfocus.com/bid/24662	vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/28583	third-party-advisoryx_refsource_SECUNIA
http://www.wireshark.org/docs/relnotes/wireshark-…	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/2353	vdb-entryx_refsource_VUPEN
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://osvdb.org/37641	vdb-entryx_refsource_OSVDB

Date Public

2007-06-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:14:12.945Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:14911",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911"
          },
          {
            "name": "25833",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25833"
          },
          {
            "name": "oval:org.mitre.oval:def:11672",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672"
          },
          {
            "name": "RHSA-2008:0059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0059.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.wireshark.org/security/wnpa-sec-2007-02.html"
          },
          {
            "name": "RHSA-2007:0710",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0710.html"
          },
          {
            "name": "26499",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26499"
          },
          {
            "name": "25987",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25987"
          },
          {
            "name": "26004",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26004"
          },
          {
            "name": "GLSA-200708-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200708-12.xml"
          },
          {
            "name": "RHSA-2007:0709",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0709.html"
          },
          {
            "name": "MDKSA-2007:145",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:145"
          },
          {
            "name": "1018315",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018315"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1498"
          },
          {
            "name": "24662",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24662"
          },
          {
            "name": "wireshark-dcpetsi-dos(35204)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35204"
          },
          {
            "name": "28583",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28583"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html"
          },
          {
            "name": "ADV-2007-2353",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2353"
          },
          {
            "name": "SUSE-SR:2007:015",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
          },
          {
            "name": "37641",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/37641"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-06-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:14911",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911"
        },
        {
          "name": "25833",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25833"
        },
        {
          "name": "oval:org.mitre.oval:def:11672",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672"
        },
        {
          "name": "RHSA-2008:0059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0059.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.wireshark.org/security/wnpa-sec-2007-02.html"
        },
        {
          "name": "RHSA-2007:0710",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0710.html"
        },
        {
          "name": "26499",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26499"
        },
        {
          "name": "25987",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25987"
        },
        {
          "name": "26004",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26004"
        },
        {
          "name": "GLSA-200708-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200708-12.xml"
        },
        {
          "name": "RHSA-2007:0709",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0709.html"
        },
        {
          "name": "MDKSA-2007:145",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:145"
        },
        {
          "name": "1018315",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018315"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1498"
        },
        {
          "name": "24662",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24662"
        },
        {
          "name": "wireshark-dcpetsi-dos(35204)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35204"
        },
        {
          "name": "28583",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28583"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html"
        },
        {
          "name": "ADV-2007-2353",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2353"
        },
        {
          "name": "SUSE-SR:2007:015",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
        },
        {
          "name": "37641",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/37641"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3391",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:14911",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911"
            },
            {
              "name": "25833",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25833"
            },
            {
              "name": "oval:org.mitre.oval:def:11672",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672"
            },
            {
              "name": "RHSA-2008:0059",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0059.html"
            },
            {
              "name": "http://www.wireshark.org/security/wnpa-sec-2007-02.html",
              "refsource": "CONFIRM",
              "url": "http://www.wireshark.org/security/wnpa-sec-2007-02.html"
            },
            {
              "name": "RHSA-2007:0710",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0710.html"
            },
            {
              "name": "26499",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26499"
            },
            {
              "name": "25987",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25987"
            },
            {
              "name": "26004",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26004"
            },
            {
              "name": "GLSA-200708-12",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200708-12.xml"
            },
            {
              "name": "RHSA-2007:0709",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0709.html"
            },
            {
              "name": "MDKSA-2007:145",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:145"
            },
            {
              "name": "1018315",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018315"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1498",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1498"
            },
            {
              "name": "24662",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24662"
            },
            {
              "name": "wireshark-dcpetsi-dos(35204)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35204"
            },
            {
              "name": "28583",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28583"
            },
            {
              "name": "http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html",
              "refsource": "CONFIRM",
              "url": "http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html"
            },
            {
              "name": "ADV-2007-2353",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2353"
            },
            {
              "name": "SUSE-SR:2007:015",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
            },
            {
              "name": "37641",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/37641"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3391",
    "datePublished": "2007-06-26T00:00:00.000Z",
    "dateReserved": "2007-06-25T00:00:00.000Z",
    "dateUpdated": "2024-08-07T14:14:12.945Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-3391",
      "date": "2026-09-14",
      "epss": "0.02255",
      "percentile": "0.81976"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.\"}, {\"lang\": \"es\", \"value\": \"Wireshark 0.99.5 permite a atacantes remotos provocar una denegaci\\u00f3n de servicio (consumo de memoria) con un paquete DCP ETSI mal formado que provoca un bucle infinito.\"}]",
      "id": "CVE-2007-3391",
      "lastModified": "2024-11-21T00:33:07.617",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:C\", \"baseScore\": 7.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2007-06-26T00:30:00.000",
      "references": "[{\"url\": \"http://osvdb.org/37641\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/25833\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/25987\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/26004\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/26499\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/28583\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200708-12.xml\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2007:145\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.novell.com/linux/security/advisories/2007_15_sr.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2007-0709.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2007-0710.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0059.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/24662\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securitytracker.com/id?1018315\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.vupen.com/english/advisories/2007/2353\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.wireshark.org/security/wnpa-sec-2007-02.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/35204\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://issues.rpath.com/browse/RPL-1498\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://osvdb.org/37641\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/25833\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/25987\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/26004\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/26499\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/28583\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200708-12.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2007:145\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.novell.com/linux/security/advisories/2007_15_sr.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2007-0709.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2007-0710.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0059.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/24662\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id?1018315\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.vupen.com/english/advisories/2007/2353\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.wireshark.org/security/wnpa-sec-2007-02.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/35204\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://issues.rpath.com/browse/RPL-1498\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2007-3391\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2007-06-26T00:30:00.000\",\"lastModified\":\"2026-04-23T00:35:47.467\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.\"},{\"lang\":\"es\",\"value\":\"Wireshark 0.99.5 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (consumo de memoria) con un paquete DCP ETSI mal formado que provoca un bucle infinito.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:C\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1\"}]}]}],\"references\":[{\"url\":\"http://osvdb.org/37641\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/25833\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/25987\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/26004\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/26499\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/28583\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://security.gentoo.org/glsa/glsa-200708-12.xml\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2007:145\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2007_15_sr.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2007-0709.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2007-0710.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0059.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/24662\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securitytracker.com/id?1018315\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/2353\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.wireshark.org/security/wnpa-sec-2007-02.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/35204\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://issues.rpath.com/browse/RPL-1498\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/37641\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/25833\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/25987\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/26004\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/26499\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/28583\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://security.gentoo.org/glsa/glsa-200708-12.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2007:145\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2007_15_sr.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2007-0709.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2007-0710.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0059.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/24662\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id?1018315\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/2353\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.wireshark.org/security/wnpa-sec-2007-02.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/35204\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://issues.rpath.com/browse/RPL-1498\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T13:19:30+00:00",
      "cve": "CVE-2007-3391",
      "id": "CVE-2007-3391",
      "initial_release_date": "2007-03-10T00:00:00+00:00",
      "product_status:fixed": "276",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Wireshark loops infinitely when inspecting DCP ETSI traffic",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2007/cve-2007-3391.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-04-28T02:01:05Z",
      "cve": "CVE-2007-3391",
      "id": "CVE-2007-3391",
      "initial_release_date": "2023-02-15T06:11:41Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2007-3391",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2007-3391.json",
      "version": "5"
    }
  }
}

CERTA-2007-AVI-278

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités ont été identifiées dans Wireshark (Ethereal). Elles permettraient à une personne distante de provoquer une perturbation du service sur le système utilisant une version vulnérable.

Description

Plusieurs vulnérabilités ont été identifiées dans l'outil de capture et d'analyse de trafic réseau Wireshark. Ce dernier est la suite du projet Ethereal achevé en 2006.

Les vulnérabilités sont dues à de mauvaises manipulations de certaines trames, dont :

une réponse HTTP particulière utilisant un mauvais encodage ;
un paquet particulier DCP ETSI (ETSI Distribution and Communication Protocol ;
un paquet malformé SSL ;
un paquet malformé MMS ;
un paquet DHCP utilisé avec DOCSIS.

Certains fichiers de capture iSeries peuvent également provoquer une erreur à l'ouverture.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Wireshark	Wireshark	Wireshark, pour les versions antérieures à 0.99.6.

References

Title

Publication Time

CERTA-2007-AVI-278

Vulnerability from certfr_avis - Published: - Updated:

Description

Plusieurs vulnérabilités ont été identifiées dans l'outil de capture et d'analyse de trafic réseau Wireshark. Ce dernier est la suite du projet Ethereal achevé en 2006.

Les vulnérabilités sont dues à de mauvaises manipulations de certaines trames, dont :

une réponse HTTP particulière utilisant un mauvais encodage ;
un paquet particulier DCP ETSI (ETSI Distribution and Communication Protocol ;
un paquet malformé SSL ;
un paquet malformé MMS ;
un paquet DHCP utilisé avec DOCSIS.

Certains fichiers de capture iSeries peuvent également provoquer une erreur à l'ouverture.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Wireshark	Wireshark	Wireshark, pour les versions antérieures à 0.99.6.

References

Title

Publication Time

FKIE_CVE-2007-3391

Vulnerability from fkie_nvd - Published: 2007-06-26 00:30 - Updated: 2026-06-16 22:41

Severity

Summary

Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.

References

URL	Tags
cve@mitre.org	http://osvdb.org/37641
cve@mitre.org	http://secunia.com/advisories/25833
cve@mitre.org	http://secunia.com/advisories/25987
cve@mitre.org	http://secunia.com/advisories/26004
cve@mitre.org	http://secunia.com/advisories/26499
cve@mitre.org	http://secunia.com/advisories/28583
cve@mitre.org	http://security.gentoo.org/glsa/glsa-200708-12.xml
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDKSA-2007:145
cve@mitre.org	http://www.novell.com/linux/security/advisories/2007_15_sr.html
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2007-0709.html
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2007-0710.html
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2008-0059.html
cve@mitre.org	http://www.securityfocus.com/bid/24662
cve@mitre.org	http://www.securitytracker.com/id?1018315
cve@mitre.org	http://www.vupen.com/english/advisories/2007/2353
cve@mitre.org	http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html	Patch
cve@mitre.org	http://www.wireshark.org/security/wnpa-sec-2007-02.html
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/35204
cve@mitre.org	https://issues.rpath.com/browse/RPL-1498
cve@mitre.org	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672
cve@mitre.org	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/37641
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/25833
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/25987
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/26004
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/26499
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/28583
af854a3a-2127-422b-91ae-364da2661108	http://security.gentoo.org/glsa/glsa-200708-12.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2007:145
af854a3a-2127-422b-91ae-364da2661108	http://www.novell.com/linux/security/advisories/2007_15_sr.html
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2007-0709.html
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2007-0710.html
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2008-0059.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/24662
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1018315
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/2353
af854a3a-2127-422b-91ae-364da2661108	http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.wireshark.org/security/wnpa-sec-2007-02.html
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/35204
af854a3a-2127-422b-91ae-364da2661108	https://issues.rpath.com/browse/RPL-1498
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911

Impacted products

	Vendor	Product	Version
	wireshark	wireshark	0.99.5

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "10FAAC5E-DD4E-49EF-A051-2F80BACC20D1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop."
    },
    {
      "lang": "es",
      "value": "Wireshark 0.99.5 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (consumo de memoria) con un paquete DCP ETSI mal formado que provoca un bucle infinito."
    }
  ],
  "id": "CVE-2007-3391",
  "lastModified": "2026-06-16T22:41:56.043",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.8,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-06-26T00:30:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/37641"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25833"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25987"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26004"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26499"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/28583"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200708-12.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:145"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0709.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0710.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0059.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/24662"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1018315"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/2353"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.wireshark.org/security/wnpa-sec-2007-02.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35204"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://issues.rpath.com/browse/RPL-1498"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/37641"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25833"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25987"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26004"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26499"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/28583"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200708-12.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:145"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0709.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0710.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0059.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/24662"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1018315"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/2353"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.wireshark.org/security/wnpa-sec-2007-02.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35204"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.rpath.com/browse/RPL-1498"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-55WP-XW38-9GMJ

Vulnerability from github – Published: 2022-05-01 18:13 – Updated: 2022-05-01 18:13

Details

Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-3391"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-06-26T00:30:00Z",
    "severity": "HIGH"
  },
  "details": "Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.",
  "id": "GHSA-55wp-xw38-9gmj",
  "modified": "2022-05-01T18:13:15Z",
  "published": "2022-05-01T18:13:15Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3391"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35204"
    },
    {
      "type": "WEB",
      "url": "https://issues.rpath.com/browse/RPL-1498"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/37641"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25833"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25987"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26004"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26499"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/28583"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200708-12.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:145"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0709.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0710.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0059.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/24662"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1018315"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/2353"
    },
    {
      "type": "WEB",
      "url": "http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html"
    },
    {
      "type": "WEB",
      "url": "http://www.wireshark.org/security/wnpa-sec-2007-02.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2007-3391

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.

Aliases

CVE-2007-3391

Aliases

CVE-2007-3391

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-3391",
    "description": "Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.",
    "id": "GSD-2007-3391",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-3391.html",
      "https://access.redhat.com/errata/RHSA-2008:0059",
      "https://access.redhat.com/errata/RHSA-2007:0710",
      "https://access.redhat.com/errata/RHSA-2007:0709",
      "https://linux.oracle.com/cve/CVE-2007-3391.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-3391"
      ],
      "details": "Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.",
      "id": "GSD-2007-3391",
      "modified": "2023-12-13T01:21:42.283343Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-3391",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "oval:org.mitre.oval:def:14911",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911"
          },
          {
            "name": "25833",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25833"
          },
          {
            "name": "oval:org.mitre.oval:def:11672",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672"
          },
          {
            "name": "RHSA-2008:0059",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0059.html"
          },
          {
            "name": "http://www.wireshark.org/security/wnpa-sec-2007-02.html",
            "refsource": "CONFIRM",
            "url": "http://www.wireshark.org/security/wnpa-sec-2007-02.html"
          },
          {
            "name": "RHSA-2007:0710",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0710.html"
          },
          {
            "name": "26499",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26499"
          },
          {
            "name": "25987",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25987"
          },
          {
            "name": "26004",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26004"
          },
          {
            "name": "GLSA-200708-12",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200708-12.xml"
          },
          {
            "name": "RHSA-2007:0709",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0709.html"
          },
          {
            "name": "MDKSA-2007:145",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:145"
          },
          {
            "name": "1018315",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1018315"
          },
          {
            "name": "https://issues.rpath.com/browse/RPL-1498",
            "refsource": "CONFIRM",
            "url": "https://issues.rpath.com/browse/RPL-1498"
          },
          {
            "name": "24662",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/24662"
          },
          {
            "name": "wireshark-dcpetsi-dos(35204)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35204"
          },
          {
            "name": "28583",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/28583"
          },
          {
            "name": "http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html",
            "refsource": "CONFIRM",
            "url": "http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html"
          },
          {
            "name": "ADV-2007-2353",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/2353"
          },
          {
            "name": "SUSE-SR:2007:015",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
          },
          {
            "name": "37641",
            "refsource": "OSVDB",
            "url": "http://osvdb.org/37641"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3391"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html"
            },
            {
              "name": "http://www.wireshark.org/security/wnpa-sec-2007-02.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.wireshark.org/security/wnpa-sec-2007-02.html"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1498",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.rpath.com/browse/RPL-1498"
            },
            {
              "name": "GLSA-200708-12",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200708-12.xml"
            },
            {
              "name": "MDKSA-2007:145",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:145"
            },
            {
              "name": "RHSA-2007:0710",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0710.html"
            },
            {
              "name": "RHSA-2007:0709",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0709.html"
            },
            {
              "name": "SUSE-SR:2007:015",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
            },
            {
              "name": "24662",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/24662"
            },
            {
              "name": "1018315",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1018315"
            },
            {
              "name": "26004",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26004"
            },
            {
              "name": "25833",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25833"
            },
            {
              "name": "25987",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25987"
            },
            {
              "name": "26499",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26499"
            },
            {
              "name": "RHSA-2008:0059",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0059.html"
            },
            {
              "name": "28583",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/28583"
            },
            {
              "name": "ADV-2007-2353",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/2353"
            },
            {
              "name": "37641",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/37641"
            },
            {
              "name": "wireshark-dcpetsi-dos(35204)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35204"
            },
            {
              "name": "oval:org.mitre.oval:def:14911",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911"
            },
            {
              "name": "oval:org.mitre.oval:def:11672",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-10-11T01:32Z",
      "publishedDate": "2007-06-26T00:30Z"
    }
  }
}

RHSA-2007:0709

Vulnerability from csaf_redhat - Published: 2007-11-15 13:26 - Updated: 2026-06-25 10:33

Summary

Red Hat Security Advisory: wireshark security and bug fix update

Severity

Low

Scope

5 vulnerabilities in this advisory, including CVE-2007-3391.

CVE-2007-3391

Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.

Fixed: 46 products

https://access.redhat.com/errata/RHSA-2007:0709

Open the full advisory

RHSA-2007:0710

Vulnerability from csaf_redhat - Published: 2007-11-07 09:00 - Updated: 2026-06-25 10:33

Summary

Red Hat Security Advisory: wireshark security update

Severity

Low

Scope

5 vulnerabilities in this advisory, including CVE-2007-3391.

CVE-2007-3391

Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.

Fixed: 26 products

https://access.redhat.com/errata/RHSA-2007:0710

Open the full advisory

RHSA-2007_0709

Vulnerability from csaf_redhat - Published: 2007-11-15 13:26 - Updated: 2024-11-22 01:40

Summary

Red Hat Security Advisory: wireshark security and bug fix update

Severity

Low

Scope

5 vulnerabilities in this advisory, including CVE-2007-3391.

CVE-2007-3391

Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.

Fixed: 76 products

https://access.redhat.com/errata/RHSA-2007:0709

Open the full advisory

RHSA-2007_0710

Vulnerability from csaf_redhat - Published: 2007-11-07 09:00 - Updated: 2024-11-22 01:40

Summary

Red Hat Security Advisory: wireshark security update

Severity

Low

Scope

5 vulnerabilities in this advisory, including CVE-2007-3391.

CVE-2007-3391

Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.

Fixed: 48 products

https://access.redhat.com/errata/RHSA-2007:0710

Open the full advisory

RHSA-2008:0059

Vulnerability from csaf_redhat - Published: 2008-01-21 09:34 - Updated: 2026-06-25 10:34

Summary

Red Hat Security Advisory: wireshark security update

Severity

Moderate

Scope

14 vulnerabilities in this advisory, including CVE-2007-3391.

CVE-2007-3391

Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.

Fixed: 92 products

https://access.redhat.com/errata/RHSA-2008:0059

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2007-3391 (GCVE-0-2007-3391)

Description

Solution

Description

Solution

Tags

Sightings

Nomenclature