CVE-2007-6438
Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows...
Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111.
Exploit likelihood
What each source reports
NVD Score used
5.0
Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111.
- Record
CVE-2007-6438- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111.
- Record
CVE-2007-6438- Updated
- 2026-11-02
EUVDEUVD-2007-6404 No score
Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111.
- Record
EUVD-2007-6404- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rxc8-cm3m-q86x No score
Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows...
Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111.
- Record
GHSA-rxc8-cm3m-q86x- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111.
- Record
CVE-2007-6438- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6438 No score
Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111.
- Record
DEBIAN-CVE-2007-6438- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 0.99.7-1 | 0.99.7-1 |
wiresharkDebian:13 |
before 0.99.7-1 | 0.99.7-1 |
wiresharkDebian:14 |
before 0.99.7-1 | 0.99.7-1 |
wiresharkDebian:5.0 From an advisory covering 5 CVEs |
before 0.99.7-1~lenny1 | 0.99.7-1~lenny1 |
libsmiRed Hat:enterprise_linux:4::as From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-develRed Hat:enterprise_linux:4::as From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
wiresharkRed Hat:enterprise_linux:4::as From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-gnomeRed Hat:enterprise_linux:4::as From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
Show 34 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libsmiRed Hat:enterprise_linux:4::desktop From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-develRed Hat:enterprise_linux:4::desktop From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
wiresharkRed Hat:enterprise_linux:4::desktop From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-gnomeRed Hat:enterprise_linux:4::desktop From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
libsmiRed Hat:enterprise_linux:4::es From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-develRed Hat:enterprise_linux:4::es From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
wiresharkRed Hat:enterprise_linux:4::es From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-gnomeRed Hat:enterprise_linux:4::es From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
libsmiRed Hat:enterprise_linux:4::ws From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
libsmi-develRed Hat:enterprise_linux:4::ws From an advisory covering 16 CVEs |
before 0:0.4.5-2.el4 | 0:0.4.5-2.el4 |
wiresharkRed Hat:enterprise_linux:4::ws From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
wireshark-gnomeRed Hat:enterprise_linux:4::ws From an advisory covering 16 CVEs |
before 0:0.99.7-1.el4 | 0:0.99.7-1.el4 |
libsmiRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
libsmi-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
libsmi-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
wiresharkRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
wireshark-gnomeRed Hat:enterprise_linux:5::client_workstation From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
libsmiRed Hat:enterprise_linux:5::client From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
libsmi-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
wiresharkRed Hat:enterprise_linux:5::client From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
libsmiRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
libsmi-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
libsmi-develRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.4.5-2.el5 | 0:0.4.5-2.el5 |
wiresharkRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
wireshark-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
wireshark-gnomeRed Hat:enterprise_linux:5::server From an advisory covering 16 CVEs |
before 0:0.99.7-1.el5 | 0:0.99.7-1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6438 is a medium vulnerability (CVSS 5.0) in Wireshark, published December 19, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.00%, the 80th percentile. Fixed in wireshark 0.99.7-1.
References
exchange.xforce.ibmcloud.com/vulnerabilities/39178
secunia.com/advisories/27777
issues.rpath.com/browse/RPL-1975
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11785
secunia.com/advisories/29048
wireshark.org/security/wnpa-sec-2007-03.html
Show 86 moreShow less
secunia.com/advisories/28564
securityfocus.com/archive/1/485792/100/0/threaded
security.gentoo.org/glsa/glsa-200712-23.xml
secunia.com/advisories/28304
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14734
secunia.com/advisories/28325
mandriva.com/security/advisories?name=MDVSA-2008:1
mandriva.com/security/advisories?name=MDVSA-2008:001
redhat.com/support/errata/RHSA-2008-0058.html
lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html
bugs.gentoo.org/show_bug.cgi?id=199958
securityfocus.com/bid/27071
secunia.com/advisories/28288
wiki.rpath.com/wiki/Advisories:rPSA-2008-0004
nvd.nist.gov/vuln/detail/CVE-2007-6438
github.com/advisories/GHSA-rxc8-cm3m-q86x
security-tracker.debian.org/tracker/CVE-2007-6438
access.redhat.com/errata/RHSA-2008:0058
wireshark.org/docs/relnotes/wireshark-0.99.7.html
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=397251
bugzilla.redhat.com/show_bug.cgi?id=397271
bugzilla.redhat.com/show_bug.cgi?id=397281
bugzilla.redhat.com/show_bug.cgi?id=397291
bugzilla.redhat.com/show_bug.cgi?id=397311
bugzilla.redhat.com/show_bug.cgi?id=397321
bugzilla.redhat.com/show_bug.cgi?id=397331
bugzilla.redhat.com/show_bug.cgi?id=397341
bugzilla.redhat.com/show_bug.cgi?id=397351
bugzilla.redhat.com/show_bug.cgi?id=397361
bugzilla.redhat.com/show_bug.cgi?id=397371
bugzilla.redhat.com/show_bug.cgi?id=426335
bugzilla.redhat.com/show_bug.cgi?id=426336
bugzilla.redhat.com/show_bug.cgi?id=427249
bugzilla.redhat.com/show_bug.cgi?id=427252
bugzilla.redhat.com/show_bug.cgi?id=427253
bugzilla.redhat.com/show_bug.cgi?id=427251
bugzilla.redhat.com/show_bug.cgi?id=427254
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0058.json
access.redhat.com/security/cve/CVE-2007-6111
cve.org/CVERecord?id=CVE-2007-6111
nvd.nist.gov/vuln/detail/CVE-2007-6111
access.redhat.com/security/cve/CVE-2007-6112
cve.org/CVERecord?id=CVE-2007-6112
nvd.nist.gov/vuln/detail/CVE-2007-6112
access.redhat.com/security/cve/CVE-2007-6113
cve.org/CVERecord?id=CVE-2007-6113
nvd.nist.gov/vuln/detail/CVE-2007-6113
access.redhat.com/security/cve/CVE-2007-6114
cve.org/CVERecord?id=CVE-2007-6114
nvd.nist.gov/vuln/detail/CVE-2007-6114
access.redhat.com/security/cve/CVE-2007-6115
cve.org/CVERecord?id=CVE-2007-6115
nvd.nist.gov/vuln/detail/CVE-2007-6115
access.redhat.com/security/cve/CVE-2007-6116
cve.org/CVERecord?id=CVE-2007-6116
nvd.nist.gov/vuln/detail/CVE-2007-6116
access.redhat.com/security/cve/CVE-2007-6117
cve.org/CVERecord?id=CVE-2007-6117
nvd.nist.gov/vuln/detail/CVE-2007-6117
access.redhat.com/security/cve/CVE-2007-6118
cve.org/CVERecord?id=CVE-2007-6118
nvd.nist.gov/vuln/detail/CVE-2007-6118
access.redhat.com/security/cve/CVE-2007-6119
cve.org/CVERecord?id=CVE-2007-6119
nvd.nist.gov/vuln/detail/CVE-2007-6119
access.redhat.com/security/cve/CVE-2007-6120
cve.org/CVERecord?id=CVE-2007-6120
nvd.nist.gov/vuln/detail/CVE-2007-6120
access.redhat.com/security/cve/CVE-2007-6121
cve.org/CVERecord?id=CVE-2007-6121
nvd.nist.gov/vuln/detail/CVE-2007-6121
access.redhat.com/security/cve/CVE-2007-6438
cve.org/CVERecord?id=CVE-2007-6438
access.redhat.com/security/cve/CVE-2007-6439
cve.org/CVERecord?id=CVE-2007-6439
nvd.nist.gov/vuln/detail/CVE-2007-6439
access.redhat.com/security/cve/CVE-2007-6441
cve.org/CVERecord?id=CVE-2007-6441
nvd.nist.gov/vuln/detail/CVE-2007-6441
access.redhat.com/security/cve/CVE-2007-6450
cve.org/CVERecord?id=CVE-2007-6450
nvd.nist.gov/vuln/detail/CVE-2007-6450
access.redhat.com/security/cve/CVE-2007-6451
cve.org/CVERecord?id=CVE-2007-6451
nvd.nist.gov/vuln/detail/CVE-2007-6451