CVE-2007-6113: wireshark Numeric Errors

CVSS: 4.3v2.0MediumModified

AliasesDEBIAN-CVE-2007-6113

Published 23-11-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-6113 is a medium (CVSS 4.3) Numeric Errors vulnerability in wireshark. EPSS estimates a 6.96% chance of exploitation in the next 30 days, higher than 94% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

29/100

0100

Medium · default modelHow is this calculated?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

6.96%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 3 · Duplicates 2

DTSA-92-1 RHSA-2008:0058 RHSA-2008:0059 CVE-2007-4721 CVE-2007-6444

Timeline

23-11-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service (long loop) via a malformed DNP3 packet.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

6.96%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.96% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.96%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoslinuxVerified
Wireshark < 0.99.5 - DNP3 Dissector Infinite Loop
Maturity: poc

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Debian1 product

wireshark< 0.99.6pre1-1

Wireshark1 product

wireshark0.6 | 0.7.9 | 0.8.16 | 0.8.19 | 0.8.20 | 0.9.2 | 0.9.5 | 0.9.6 | 0.9.7 | 0.9.8 | 0.9.10 | 0.9.14 | 0.9.15 | 0.10.2 | 0.10.3 | 0.10.4 | 0.10.5 | 0.10.6 | 0.10.7 | 0.10.8 | 0.10.9 | 0.10.12 | 0.10.13 | 0.10.14 | 0.99 | 0.99.0 | 0.99.1 | 0.99.2 | 0.99.3 | 0.99.4 | 0.99.5 | 0.99.6

2 vendors · 2 products

References

33 links

secunia.com/advisories/27777Third Party AdvisoryX Refsource SECUNIAVendor Advisory
issues.rpath.com/browse/RPL-1975X Refsource CONFIRM
secunia.com/advisories/29048Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securitytracker.com/id?1018635VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/26532VDB EntryX Refsource BIDPatch
www.wireshark.org/security/wnpa-sec-2007-03.htmlX Refsource CONFIRMPatchVendor Advisory
secunia.com/advisories/28564Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/485792/100/0/threadedMailing ListX Refsource BUGTRAQ
security.gentoo.org/glsa/glsa-200712-23.xmlVendor AdvisoryX Refsource GENTOO
www.securityfocus.com/archive/1/478497/100/0/threadedMailing ListX Refsource BUGTRAQ

Show all 33 references

www.redhat.com/support/errata/RHSA-2008-0059.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/28304Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securitytracker.com/id?1018988VDB EntryX Refsource SECTRACK
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9841VDB EntrySignatureX Refsource OVAL
www.redhat.com/archives/fedora-package-announce/2007-December/msg00712.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/28325Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:1Vendor AdvisoryX Refsource MANDRIVA
www.exploit-db.com/exploits/4347ExploitX Refsource EXPLOIT DB
www.mandriva.com/security/advisories?name=MDVSA-2008:001Vendor AdvisoryX Refsource MANDRIVA
www.securiteam.com/securitynews/5LP0V00MAI.htmlX Refsource MISC
securityreason.com/securityalert/3095Third Party AdvisoryX Refsource SREASON
www.redhat.com/support/errata/RHSA-2008-0058.htmlVendor AdvisoryX Refsource REDHAT
lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.htmlVendor AdvisoryX Refsource SUSE
bugs.gentoo.org/show_bug.cgi?id=199958X Refsource MISC
secunia.com/advisories/28583Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2007/3956VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/28197Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/28288Third Party AdvisoryX Refsource SECUNIAVendor Advisory
wiki.rpath.com/wiki/Advisories:rPSA-2008-0004X Refsource CONFIRM
secunia.com/advisories/28207Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/archives/fedora-package-announce/2007-December/msg00606.htmlVendor AdvisoryX Refsource FEDORA
exchange.xforce.ibmcloud.com/vulnerabilities/36392VDB EntryX Refsource XF
security-tracker.debian.org/tracker/CVE-2007-6113Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities