CVE-2008-3140

Description

The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an incomplete SS7 MSU syslog encapsulated packet.

Risk Information

Base Score
7.5
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
5.3

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Wireshark (X64) 1.0.0Windows
Multiple vulnerabilities affected in Wireshark 1.0.0Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-343288Wireshark (X64) (4.4.2)
PATCH-338541Wireshark (3.6.24)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234