PT-2007-7283 · Red Hat+5 · Libsmi+3

Published 2007-12-19 · Updated 2023-02-13 · CVE-2007-6439

OSV

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite or large loop) via the (1) IPv6 or (2) USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by CVE-2007-6116. The DCP ETSI issue is already covered by CVE-2007-6119.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-6439

DTSA-104-1

RHSA-2008:0058

RHSA-2008_0058

Affected Products

Libsmi

Libsmi-Devel

Wireshark

Wireshark-Gnome

References · 42

• http://secunia.com/advisories/28288 · Vendor Advisory
• http://secunia.com/advisories/29048 · Vendor Advisory
• http://secunia.com/advisories/28325 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200712-23.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-6439 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-6439 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0058.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-6439 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:001 · Vendor Advisory
• http://secunia.com/advisories/28564 · Vendor Advisory
• http://secunia.com/advisories/28304 · Vendor Advisory
• http://secunia.com/advisories/27777 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6439 · Security Note