CVE-2007-3389: wireshark Improper Input Validation

CVSS: 5.0v2.0MediumModified

AliasesDEBIAN-CVE-2007-3389

Published 26-06-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-3389 is a medium (CVSS 5.0) Improper Input Validation vulnerability in wireshark. EPSS estimates a 16.26% chance of exploitation in the next 30 days, higher than 96.9% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

33/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

16.26%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1metasploit

Advisory lineage

Upstream 0 · Downstream 3

RHSA-2007:0709 RHSA-2007:0710 RHSA-2008:0059

Timeline

26-06-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

16.26%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 16.26% on 18-09-2026

18-09-202618-10-2026

EPSS score

16.26%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

MetasploitremoteUnverified
Wireshark chunked_encoding_dissector Function DOS
auxiliary/dos/wireshark/chunked
Maturity: poc

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Debian1 product

wireshark< 0.99.6pre1-1

Wireshark1 product

wireshark0.99.0 | 0.99.1 | 0.99.2 | 0.99.3 | 0.99.4 | 0.99.5

2 vendors · 2 products

References

22 links

secunia.com/advisories/25833Third Party AdvisoryX Refsource SECUNIA
osvdb.org/37643VDB EntryX Refsource OSVDB
www.redhat.com/support/errata/RHSA-2008-0059.htmlVendor AdvisoryX Refsource REDHAT
www.wireshark.org/security/wnpa-sec-2007-02.htmlX Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2007-0710.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/26499Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25987Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26004Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200708-12.xmlVendor AdvisoryX Refsource GENTOO
exchange.xforce.ibmcloud.com/vulnerabilities/35207VDB EntryX Refsource XF

Show all 22 references

www.redhat.com/support/errata/RHSA-2007-0709.htmlVendor AdvisoryX Refsource REDHAT
www.mandriva.com/security/advisories?name=MDKSA-2007:145Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/27592Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9964VDB EntrySignatureX Refsource OVAL
www.securitytracker.com/id?1018315VDB EntryX Refsource SECTRACK
issues.rpath.com/browse/RPL-1498X Refsource CONFIRM
www.securityfocus.com/bid/24662VDB EntryX Refsource BID
secunia.com/advisories/28583Third Party AdvisoryX Refsource SECUNIA
www.wireshark.org/docs/relnotes/wireshark-0.99.6.htmlX Refsource CONFIRM
www.vupen.com/english/advisories/2007/2353VDB EntryX Refsource VUPEN
www.novell.com/linux/security/advisories/2007_15_sr.htmlVendor AdvisoryX Refsource SUSE
security-tracker.debian.org/tracker/CVE-2007-3389Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities