1. CVE-Search
  2. CVE-2008-1563
ID CVE-2008-1563
Summary The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
References
Vulnerable Configurations
  • cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 11-10-2018 - 20:35)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
oval via4
  • accepted 2013-04-29T04:03:52.506-04:00
    class vulnerability
    contributors
    • name Aharon Chernin
      organization SCAP.com, LLC
    • name Dragos Prisaca
      organization G2, Inc.
    definition_extensions
    • comment The operating system installed on the system is Red Hat Enterprise Linux 3
      oval oval:org.mitre.oval:def:11782
    • comment CentOS Linux 3.x
      oval oval:org.mitre.oval:def:16651
    • comment The operating system installed on the system is Red Hat Enterprise Linux 4
      oval oval:org.mitre.oval:def:11831
    • comment CentOS Linux 4.x
      oval oval:org.mitre.oval:def:16636
    • comment Oracle Linux 4.x
      oval oval:org.mitre.oval:def:15990
    • comment The operating system installed on the system is Red Hat Enterprise Linux 5
      oval oval:org.mitre.oval:def:11414
    • comment The operating system installed on the system is CentOS Linux 5.x
      oval oval:org.mitre.oval:def:15802
    • comment Oracle Linux 5.x
      oval oval:org.mitre.oval:def:15459
    description The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    family unix
    id oval:org.mitre.oval:def:10238
    status accepted
    submitted 2010-07-09T03:56:16-04:00
    title The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    version 30
  • accepted 2013-08-19T04:00:58.577-04:00
    class vulnerability
    contributors
    • name Shane Shaffer
      organization G2, Inc.
    • name Shane Shaffer
      organization G2, Inc.
    • name Shane Shaffer
      organization G2, Inc.
    definition_extensions
    comment Wireshark is installed on the system.
    oval oval:org.mitre.oval:def:6589
    description The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    family windows
    id oval:org.mitre.oval:def:15074
    status accepted
    submitted 2012-02-27T15:34:33.178-04:00
    title SCCP dissector vulnerability in Wireshark 0.99.6 through 0.99.8
    version 8
redhat via4
advisories
rhsa
id RHSA-2008:0890
rpms
  • wireshark-0:1.0.3-3.el4_7
  • wireshark-0:1.0.3-4.el5_2
  • wireshark-0:1.0.3-EL3.3
  • wireshark-debuginfo-0:1.0.3-3.el4_7
  • wireshark-debuginfo-0:1.0.3-4.el5_2
  • wireshark-debuginfo-0:1.0.3-EL3.3
  • wireshark-gnome-0:1.0.3-3.el4_7
  • wireshark-gnome-0:1.0.3-4.el5_2
  • wireshark-gnome-0:1.0.3-EL3.3
refmap via4
bid 28485
bugtraq 20080404 rPSA-2008-0138-1 tshark wireshark
confirm
fedora
  • FEDORA-2008-2941
  • FEDORA-2008-3040
gentoo GLSA-200805-05
mandriva MDVSA-2008:091
sectrack 1019728
secunia
  • 29569
  • 29622
  • 29695
  • 29736
  • 29971
  • 32091
suse SUSE-SR:2008:008
vupen
  • ADV-2008-1007
  • ADV-2008-2773
xf wireshark-sccp-dissector-dos(41517)
statements via4
contributor Mark J Cox
lastmodified 2008-10-17
organization Red Hat
statement The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0890.html
Last major update 11-10-2018 - 20:35
Published 31-03-2008 - 22:44
Last modified 11-10-2018 - 20:35
Back to Top