CVE-2007-6114
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote...
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.
Exploit likelihood
What each source reports
NVD Score used
10.0
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.
- Record
CVE-2007-6114- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.
- Record
CVE-2007-6114- Updated
- 2026-11-02
EUVDEUVD-2007-6083 No score
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.
- Record
EUVD-2007-6083- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cx8v-qfhv-3hjp No score
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote...
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.
- Record
GHSA-cx8v-qfhv-3hjp- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.
- Record
CVE-2007-6114- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6114 No score
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.
- Record
DEBIAN-CVE-2007-6114- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 0.99.7~pre1-1 | 0.99.7~pre1-1 |
wiresharkDebian:13 |
before 0.99.7~pre1-1 | 0.99.7~pre1-1 |
wiresharkDebian:14 |
before 0.99.7~pre1-1 | 0.99.7~pre1-1 |
wiresharkDebian:4.0 From an advisory covering 5 CVEs |
before 0.99.4-5.etch.1, plus listed versions 0.99.4-50.99.4-5.etch.0 |
0.99.4-5.etch.1 |
etherealDebian:3.1 From an advisory covering 5 CVEs |
before 0.10.10-2sarge10, plus listed versions 0.10.10-2sarge20.10.10-2sarge30.10.10-2sarge40.10.10-2sarge50.10.10-2sarge60.10.10-2sarge80.10.10-2sarge9 |
0.10.10-2sarge10 |
wiresharkDebian:5.0 From an advisory covering 11 CVEs |
before 0.99.6rel-5+0.99.7~pre1-1+lenny1 | 0.99.6rel-5+0.99.7~pre1-1+lenny1 |
libsmiRed Hat:enterprise_linux:4::as From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-develRed Hat:enterprise_linux:4::as From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
wiresharkRed Hat:enterprise_linux:4::as From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
Show 60 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wireshark-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-gnomeRed Hat:enterprise_linux:4::as From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
libsmiRed Hat:enterprise_linux:4::desktop From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-develRed Hat:enterprise_linux:4::desktop From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
wiresharkRed Hat:enterprise_linux:4::desktop From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-gnomeRed Hat:enterprise_linux:4::desktop From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
libsmiRed Hat:enterprise_linux:4::es From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-develRed Hat:enterprise_linux:4::es From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
wiresharkRed Hat:enterprise_linux:4::es From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-gnomeRed Hat:enterprise_linux:4::es From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
libsmiRed Hat:enterprise_linux:4::ws From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-develRed Hat:enterprise_linux:4::ws From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
wiresharkRed Hat:enterprise_linux:4::ws From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-gnomeRed Hat:enterprise_linux:4::ws From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
libsmiRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
libsmi-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
libsmi-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
wiresharkRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
wireshark-gnomeRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
libsmiRed Hat:enterprise_linux:5::client From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
libsmi-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
wiresharkRed Hat:enterprise_linux:5::client From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
libsmiRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
libsmi-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
libsmi-develRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
wiresharkRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
wireshark-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
wireshark-gnomeRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
libsmiRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-develRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
wiresharkRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
libsmiRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-develRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
wiresharkRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
libsmiRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-develRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
wiresharkRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
libsmiRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
libsmi-develRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:0.4.5-3.el3 | 0:0.4.5-3.el3 |
wiresharkRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:0.99.7-EL3.1 | 0:0.99.7-EL3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6114 is a high vulnerability (CVSS 10.0) in Wireshark, published November 23, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.21%, the 93rd percentile. Fixed in wireshark 0.99.7~pre1-1.
References
secunia.com/advisories/27777
issues.rpath.com/browse/RPL-1975
secunia.com/advisories/29048
securityfocus.com/bid/26532
wireshark.org/security/wnpa-sec-2007-03.html
secunia.com/advisories/28564
Show 118 moreShow less
securityfocus.com/archive/1/485792/100/0/threaded
security.gentoo.org/glsa/glsa-200712-23.xml
redhat.com/support/errata/RHSA-2008-0059.html
secunia.com/advisories/28304
securitytracker.com/id?1018988
debian.org/security/2007/dsa-1414
redhat.com/archives/fedora-package-announce/2007-December/msg00712.html
secunia.com/advisories/28325
mandriva.com/security/advisories?name=MDVSA-2008:1
mandriva.com/security/advisories?name=MDVSA-2008:001
redhat.com/support/errata/RHSA-2008-0058.html
lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html
bugs.gentoo.org/show_bug.cgi?id=199958
secunia.com/advisories/28583
vupen.com/english/advisories/2007/3956
secunia.com/advisories/28197
secunia.com/advisories/28288
wiki.rpath.com/wiki/Advisories:rPSA-2008-0004
secunia.com/advisories/28207
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10708
redhat.com/archives/fedora-package-announce/2007-December/msg00606.html
secunia.com/advisories/27817
nvd.nist.gov/vuln/detail/CVE-2007-6114
github.com/advisories/GHSA-cx8v-qfhv-3hjp
security-tracker.debian.org/tracker/CVE-2007-6114
access.redhat.com/errata/RHSA-2008:0058
wireshark.org/docs/relnotes/wireshark-0.99.7.html
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=397251
bugzilla.redhat.com/show_bug.cgi?id=397271
bugzilla.redhat.com/show_bug.cgi?id=397281
bugzilla.redhat.com/show_bug.cgi?id=397291
bugzilla.redhat.com/show_bug.cgi?id=397311
bugzilla.redhat.com/show_bug.cgi?id=397321
bugzilla.redhat.com/show_bug.cgi?id=397331
bugzilla.redhat.com/show_bug.cgi?id=397341
bugzilla.redhat.com/show_bug.cgi?id=397351
bugzilla.redhat.com/show_bug.cgi?id=397361
bugzilla.redhat.com/show_bug.cgi?id=397371
bugzilla.redhat.com/show_bug.cgi?id=426335
bugzilla.redhat.com/show_bug.cgi?id=426336
bugzilla.redhat.com/show_bug.cgi?id=427249
bugzilla.redhat.com/show_bug.cgi?id=427252
bugzilla.redhat.com/show_bug.cgi?id=427253
bugzilla.redhat.com/show_bug.cgi?id=427251
bugzilla.redhat.com/show_bug.cgi?id=427254
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0058.json
access.redhat.com/security/cve/CVE-2007-6111
cve.org/CVERecord?id=CVE-2007-6111
nvd.nist.gov/vuln/detail/CVE-2007-6111
access.redhat.com/security/cve/CVE-2007-6112
cve.org/CVERecord?id=CVE-2007-6112
nvd.nist.gov/vuln/detail/CVE-2007-6112
access.redhat.com/security/cve/CVE-2007-6113
cve.org/CVERecord?id=CVE-2007-6113
nvd.nist.gov/vuln/detail/CVE-2007-6113
access.redhat.com/security/cve/CVE-2007-6114
cve.org/CVERecord?id=CVE-2007-6114
access.redhat.com/security/cve/CVE-2007-6115
cve.org/CVERecord?id=CVE-2007-6115
nvd.nist.gov/vuln/detail/CVE-2007-6115
access.redhat.com/security/cve/CVE-2007-6116
cve.org/CVERecord?id=CVE-2007-6116
nvd.nist.gov/vuln/detail/CVE-2007-6116
access.redhat.com/security/cve/CVE-2007-6117
cve.org/CVERecord?id=CVE-2007-6117
nvd.nist.gov/vuln/detail/CVE-2007-6117
access.redhat.com/security/cve/CVE-2007-6118
cve.org/CVERecord?id=CVE-2007-6118
nvd.nist.gov/vuln/detail/CVE-2007-6118
access.redhat.com/security/cve/CVE-2007-6119
cve.org/CVERecord?id=CVE-2007-6119
nvd.nist.gov/vuln/detail/CVE-2007-6119
access.redhat.com/security/cve/CVE-2007-6120
cve.org/CVERecord?id=CVE-2007-6120
nvd.nist.gov/vuln/detail/CVE-2007-6120
access.redhat.com/security/cve/CVE-2007-6121
cve.org/CVERecord?id=CVE-2007-6121
nvd.nist.gov/vuln/detail/CVE-2007-6121
access.redhat.com/security/cve/CVE-2007-6438
cve.org/CVERecord?id=CVE-2007-6438
nvd.nist.gov/vuln/detail/CVE-2007-6438
access.redhat.com/security/cve/CVE-2007-6439
cve.org/CVERecord?id=CVE-2007-6439
nvd.nist.gov/vuln/detail/CVE-2007-6439
access.redhat.com/security/cve/CVE-2007-6441
cve.org/CVERecord?id=CVE-2007-6441
nvd.nist.gov/vuln/detail/CVE-2007-6441
access.redhat.com/security/cve/CVE-2007-6450
cve.org/CVERecord?id=CVE-2007-6450
nvd.nist.gov/vuln/detail/CVE-2007-6450
access.redhat.com/security/cve/CVE-2007-6451
cve.org/CVERecord?id=CVE-2007-6451
nvd.nist.gov/vuln/detail/CVE-2007-6451
access.redhat.com/errata/RHSA-2008:0059
bugzilla.redhat.com/show_bug.cgi?id=245796
bugzilla.redhat.com/show_bug.cgi?id=245797
bugzilla.redhat.com/show_bug.cgi?id=245798
bugzilla.redhat.com/show_bug.cgi?id=246221
bugzilla.redhat.com/show_bug.cgi?id=246225
bugzilla.redhat.com/show_bug.cgi?id=246229
bugzilla.redhat.com/show_bug.cgi?id=426337
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0059.json
access.redhat.com/security/cve/CVE-2007-3389
cve.org/CVERecord?id=CVE-2007-3389
nvd.nist.gov/vuln/detail/CVE-2007-3389
access.redhat.com/security/cve/CVE-2007-3390
cve.org/CVERecord?id=CVE-2007-3390
nvd.nist.gov/vuln/detail/CVE-2007-3390
access.redhat.com/security/cve/CVE-2007-3391
cve.org/CVERecord?id=CVE-2007-3391
nvd.nist.gov/vuln/detail/CVE-2007-3391
access.redhat.com/security/cve/CVE-2007-3392
cve.org/CVERecord?id=CVE-2007-3392
nvd.nist.gov/vuln/detail/CVE-2007-3392
access.redhat.com/security/cve/CVE-2007-3393
cve.org/CVERecord?id=CVE-2007-3393
nvd.nist.gov/vuln/detail/CVE-2007-3393