CVE-2007-6121: ethereal_group ethereal Improper Input Validation

CVSS: 5.0v2.0MediumModified

AliasesDEBIAN-CVE-2007-6121

Published 23-11-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-6121 is a medium (CVSS 5.0) Improper Input Validation vulnerability in ethereal_group ethereal. EPSS estimates a 2.00% chance of exploitation in the next 30 days, higher than 80.4% of scored vulnerabilities.

Overall risk

20/100

0100

Low · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

2.00%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Duplicates 1

DSA-1414-1 DTSA-92-1 RHSA-2008:0058 RHSA-2008:0059 CVE-2007-6449

Timeline

23-11-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

2.00%

Chance of exploitation in the next 30 days

Percentile

80%

Versus all other CVEs

30-day change

0.00 pp

From 2.00% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.00%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Debian1 product

wireshark< 0.99.7~pre1-1

Ethereal_group1 product

ethereal0.8.16 | 0.8.17 | 0.8.17a | 0.8.18 | 0.8.19 | 0.8.20 | 0.9 | 0.9.0 | 0.9.1 | 0.9.2 | 0.9.3 | 0.9.4 | 0.9.5 | 0.9.6 | 0.9.7 | 0.9.8 | 0.9.9 | 0.9.10 | 0.9.11 | 0.9.12 | 0.9.13 | 0.9.14 | 0.9.15 | 0.9.16 | 0.10 | 0.10.0 | 0.10.0a | 0.10.1 | 0.10.2 | 0.10.3 | 0.10.4 | 0.10.5 | 0.10.6 | 0.10.7 | 0.10.8 | 0.10.9 | 0.10.10 | 0.10.11 | 0.10.12 | 0.10.13 | 0.10.14 | 0.99.0

Wireshark1 product

wireshark0.8.16 | 0.9.8 | 0.9.10 | 0.99 | 0.99.0 | 0.99.1 | 0.99.2 | 0.99.3 | 0.99.4 | 0.99.5 | 0.99.6

3 vendors · 3 products

References

29 links

secunia.com/advisories/27777Third Party AdvisoryX Refsource SECUNIAVendor Advisory
issues.rpath.com/browse/RPL-1975X Refsource CONFIRM
secunia.com/advisories/29048Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/26532VDB EntryX Refsource BIDPatch
www.wireshark.org/security/wnpa-sec-2007-03.htmlX Refsource CONFIRMPatch
secunia.com/advisories/28564Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/485792/100/0/threadedMailing ListX Refsource BUGTRAQ
security.gentoo.org/glsa/glsa-200712-23.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/support/errata/RHSA-2008-0059.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/28304Third Party AdvisoryX Refsource SECUNIA

Show all 29 references

securitytracker.com/id?1018988VDB EntryX Refsource SECTRACK
www.debian.org/security/2007/dsa-1414Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/archives/fedora-package-announce/2007-December/msg00712.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/28325Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:1Vendor AdvisoryX Refsource MANDRIVA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11374VDB EntrySignatureX Refsource OVAL
www.mandriva.com/security/advisories?name=MDVSA-2008:001Vendor AdvisoryX Refsource MANDRIVA
www.redhat.com/support/errata/RHSA-2008-0058.htmlVendor AdvisoryX Refsource REDHAT
lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.htmlVendor AdvisoryX Refsource SUSE
bugs.gentoo.org/show_bug.cgi?id=199958X Refsource MISC
secunia.com/advisories/28583Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2007/3956VDB EntryX Refsource VUPEN
secunia.com/advisories/28197Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/28288Third Party AdvisoryX Refsource SECUNIAVendor Advisory
wiki.rpath.com/wiki/Advisories:rPSA-2008-0004X Refsource CONFIRM
secunia.com/advisories/28207Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/archives/fedora-package-announce/2007-December/msg00606.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/27817Third Party AdvisoryX Refsource SECUNIAVendor Advisory
security-tracker.debian.org/tracker/CVE-2007-6121Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities