CVE-2008-1070

The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
VendorProductVersion
wiresharkwireshark
0.6
wiresharkwireshark
0.7.9
wiresharkwireshark
0.8.16
wiresharkwireshark
0.9.10
wiresharkwireshark
0.10
wiresharkwireshark
0.10.4
wiresharkwireshark
0.10.13
wiresharkwireshark
0.99
wiresharkwireshark
0.99.1
wiresharkwireshark
0.99.2
wiresharkwireshark
0.99.3
wiresharkwireshark
0.99.4
wiresharkwireshark
0.99.5
wiresharkwireshark
0.99.6
wiresharkwireshark
0.99.7
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
wireshark
bullseye
3.4.10-0+deb11u1
fixed
etch
not-affected
sarge
not-affected
bullseye (security)
3.4.16-0+deb11u1
fixed
bookworm
4.0.11-1~deb12u1
fixed
bookworm (security)
4.0.11-1~deb12u1
fixed
trixie
4.4.0-1
fixed
sid
4.4.1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ethereal
hardy
dne
gutsy
dne
feisty
dne
edgy
dne
dapper
not-affected
wireshark
hardy
Fixed 0.99.8-1
released
gutsy
Fixed 0.99.6rel-3ubuntu0.2
released
feisty
not-affected
edgy
not-affected
dapper
dne
References
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
http://secunia.com/advisories/29156
http://secunia.com/advisories/29188
http://secunia.com/advisories/29223
http://secunia.com/advisories/29242
http://secunia.com/advisories/29511
http://secunia.com/advisories/29736
http://secunia.com/advisories/32091
http://security.gentoo.org/glsa/glsa-200803-32.xml
http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092
http://www.mandriva.com/security/advisories?name=MDVSA-2008:057
http://www.redhat.com/support/errata/RHSA-2008-0890.html
http://www.securityfocus.com/archive/1/488967/100/0/threaded
http://www.securityfocus.com/bid/28025
http://www.securitytracker.com/id?1019515
http://www.vupen.com/english/advisories/2008/0704
http://www.vupen.com/english/advisories/2008/2773
http://www.wireshark.org/security/wnpa-sec-2008-01.html
https://issues.rpath.com/browse/RPL-2296
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11378
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14995
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
http://secunia.com/advisories/29156
http://secunia.com/advisories/29188
http://secunia.com/advisories/29223
http://secunia.com/advisories/29242
http://secunia.com/advisories/29511
http://secunia.com/advisories/29736
http://secunia.com/advisories/32091
http://security.gentoo.org/glsa/glsa-200803-32.xml
http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092
http://www.mandriva.com/security/advisories?name=MDVSA-2008:057
http://www.redhat.com/support/errata/RHSA-2008-0890.html
http://www.securityfocus.com/archive/1/488967/100/0/threaded
http://www.securityfocus.com/bid/28025
http://www.securitytracker.com/id?1019515
http://www.vupen.com/english/advisories/2008/0704
http://www.vupen.com/english/advisories/2008/2773
http://www.wireshark.org/security/wnpa-sec-2008-01.html
https://issues.rpath.com/browse/RPL-2296
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11378
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14995
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html