CVE-2007-3392
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1)...
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.
Exploit likelihood
What each source reports
NVD Score used
5.0
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.
- Record
CVE-2007-3392- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.
- Record
CVE-2007-3392- Updated
- 2026-11-02
EUVDEUVD-2007-3378 No score
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.
- Record
EUVD-2007-3378- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9xr3-c3rj-hw9r No score
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1)...
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.
- Record
GHSA-9xr3-c3rj-hw9r- Updated
- 2026-11-02
OSV No score
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.
- Record
CVE-2007-3392- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-3392 No score
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.
- Record
DEBIAN-CVE-2007-3392- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 0.99.6pre1-1 | 0.99.6pre1-1 |
wiresharkDebian:13 |
before 0.99.6pre1-1 | 0.99.6pre1-1 |
wiresharkDebian:14 |
before 0.99.6pre1-1 | 0.99.6pre1-1 |
wiresharkDebian:4.0 From an advisory covering 3 CVEs |
before 0.99.4-5.etch.0, plus listed versions 0.99.4-5 |
0.99.4-5.etch.0 |
wiresharkRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:0.99.6-EL4.1 | 0:0.99.6-EL4.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:0.99.6-EL4.1 | 0:0.99.6-EL4.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:0.99.6-EL4.1 | 0:0.99.6-EL4.1 |
wiresharkRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:0.99.6-EL4.1 | 0:0.99.6-EL4.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:0.99.6-EL4.1 | 0:0.99.6-EL4.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:0.99.6-EL4.1 | 0:0.99.6-EL4.1 |
Show 38 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:0.99.6-EL4.1 | 0:0.99.6-EL4.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:0.99.6-EL4.1 | 0:0.99.6-EL4.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:0.99.6-EL4.1 | 0:0.99.6-EL4.1 |
wiresharkRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:0.99.6-EL4.1 | 0:0.99.6-EL4.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:0.99.6-EL4.1 | 0:0.99.6-EL4.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:0.99.6-EL4.1 | 0:0.99.6-EL4.1 |
wiresharkRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:0.99.6-1.el5 | 0:0.99.6-1.el5 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:0.99.6-1.el5 | 0:0.99.6-1.el5 |
wireshark-gnomeRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:0.99.6-1.el5 | 0:0.99.6-1.el5 |
wiresharkRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:0.99.6-1.el5 | 0:0.99.6-1.el5 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:0.99.6-1.el5 | 0:0.99.6-1.el5 |
wiresharkRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:0.99.6-1.el5 | 0:0.99.6-1.el5 |
wireshark-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:0.99.6-1.el5 | 0:0.99.6-1.el5 |
wireshark-gnomeRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:0.99.6-1.el5 | 0:0.99.6-1.el5 |
libsmiRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-develRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
wiresharkRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
libsmiRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-develRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
wiresharkRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
libsmiRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-develRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
wiresharkRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
libsmiRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-develRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
wiresharkRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3392 is a medium vulnerability (CVSS 5.0) in Wireshark, published June 26, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.91%, the 87th percentile. Fixed in wireshark 0.99.6pre1-1.
References
secunia.com/advisories/25833
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10663
secunia.com/advisories/25877
redhat.com/support/errata/RHSA-2008-0059.html
wireshark.org/security/wnpa-sec-2007-02.html
redhat.com/support/errata/RHSA-2007-0710.html
Show 86 moreShow less
secunia.com/advisories/26499
secunia.com/advisories/25987
secunia.com/advisories/26004
security.gentoo.org/glsa/glsa-200708-12.xml
redhat.com/support/errata/RHSA-2007-0709.html
mandriva.com/security/advisories?name=MDKSA-2007:145
securitytracker.com/id?1018315
issues.rpath.com/browse/RPL-1498
securityfocus.com/bid/24662
secunia.com/advisories/28583
wireshark.org/docs/relnotes/wireshark-0.99.6.html
vupen.com/english/advisories/2007/2353
securityfocus.com/archive/1/476468/100/0/threaded
debian.org/security/2007/dsa-1322
novell.com/linux/security/advisories/2007_15_sr.html
bugs.wireshark.org/bugzilla/show_bug.cgi?id=1582
exchange.xforce.ibmcloud.com/vulnerabilities/35203
nvd.nist.gov/vuln/detail/CVE-2007-3392
github.com/advisories/GHSA-9xr3-c3rj-hw9r
security-tracker.debian.org/tracker/CVE-2007-3392
access.redhat.com/errata/RHSA-2007:0709
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=245796
bugzilla.redhat.com/show_bug.cgi?id=245797
bugzilla.redhat.com/show_bug.cgi?id=245798
bugzilla.redhat.com/show_bug.cgi?id=246221
bugzilla.redhat.com/show_bug.cgi?id=246225
bugzilla.redhat.com/show_bug.cgi?id=246229
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0709.json
access.redhat.com/security/cve/CVE-2007-3389
cve.org/CVERecord?id=CVE-2007-3389
nvd.nist.gov/vuln/detail/CVE-2007-3389
access.redhat.com/security/cve/CVE-2007-3390
cve.org/CVERecord?id=CVE-2007-3390
nvd.nist.gov/vuln/detail/CVE-2007-3390
access.redhat.com/security/cve/CVE-2007-3391
cve.org/CVERecord?id=CVE-2007-3391
nvd.nist.gov/vuln/detail/CVE-2007-3391
access.redhat.com/security/cve/CVE-2007-3392
cve.org/CVERecord?id=CVE-2007-3392
access.redhat.com/security/cve/CVE-2007-3393
cve.org/CVERecord?id=CVE-2007-3393
nvd.nist.gov/vuln/detail/CVE-2007-3393
access.redhat.com/errata/RHSA-2007:0710
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0710.json
access.redhat.com/errata/RHSA-2008:0059
wireshark.org/docs/relnotes/wireshark-0.99.7.html
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=397281
bugzilla.redhat.com/show_bug.cgi?id=397291
bugzilla.redhat.com/show_bug.cgi?id=397311
bugzilla.redhat.com/show_bug.cgi?id=397331
bugzilla.redhat.com/show_bug.cgi?id=397341
bugzilla.redhat.com/show_bug.cgi?id=397361
bugzilla.redhat.com/show_bug.cgi?id=397371
bugzilla.redhat.com/show_bug.cgi?id=426337
bugzilla.redhat.com/show_bug.cgi?id=427253
bugzilla.redhat.com/show_bug.cgi?id=427254
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0059.json
access.redhat.com/security/cve/CVE-2007-6113
cve.org/CVERecord?id=CVE-2007-6113
nvd.nist.gov/vuln/detail/CVE-2007-6113
access.redhat.com/security/cve/CVE-2007-6114
cve.org/CVERecord?id=CVE-2007-6114
nvd.nist.gov/vuln/detail/CVE-2007-6114
access.redhat.com/security/cve/CVE-2007-6115
cve.org/CVERecord?id=CVE-2007-6115
nvd.nist.gov/vuln/detail/CVE-2007-6115
access.redhat.com/security/cve/CVE-2007-6117
cve.org/CVERecord?id=CVE-2007-6117
nvd.nist.gov/vuln/detail/CVE-2007-6117
access.redhat.com/security/cve/CVE-2007-6118
cve.org/CVERecord?id=CVE-2007-6118
nvd.nist.gov/vuln/detail/CVE-2007-6118
access.redhat.com/security/cve/CVE-2007-6120
cve.org/CVERecord?id=CVE-2007-6120
nvd.nist.gov/vuln/detail/CVE-2007-6120
access.redhat.com/security/cve/CVE-2007-6121
cve.org/CVERecord?id=CVE-2007-6121
nvd.nist.gov/vuln/detail/CVE-2007-6121
access.redhat.com/security/cve/CVE-2007-6450
cve.org/CVERecord?id=CVE-2007-6450
nvd.nist.gov/vuln/detail/CVE-2007-6450
access.redhat.com/security/cve/CVE-2007-6451
cve.org/CVERecord?id=CVE-2007-6451
nvd.nist.gov/vuln/detail/CVE-2007-6451