CVE-2008-1071
The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers...
The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.
Exploit likelihood
What each source reports
NVD Score used
4.3
The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.
- Record
CVE-2008-1071- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.
- Record
CVE-2008-1071- Updated
- 2026-11-02
EUVDEUVD-2008-1082 No score
The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.
- Record
EUVD-2008-1082- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gwf6-x6vr-hh5m No score
The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers...
The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.
- Record
GHSA-gwf6-x6vr-hh5m- Updated
- 2026-11-02
OSV No score
The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.
- Record
CVE-2008-1071- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-1071 No score
The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.
- Record
DEBIAN-CVE-2008-1071- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 0.99.8-1 | 0.99.8-1 |
wiresharkDebian:13 |
before 0.99.8-1 | 0.99.8-1 |
wiresharkDebian:14 |
before 0.99.8-1 | 0.99.8-1 |
wiresharkRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
Show 25 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wireshark-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:5::client_workstation From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-gnomeRed Hat:enterprise_linux:5::client_workstation From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wiresharkRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wiresharkRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-gnomeRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1071 is a medium vulnerability (CVSS 4.3) in Wireshark, published February 28, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.70%, the 77th percentile. Fixed in wireshark 0.99.8-1.
References
security.gentoo.org/glsa/glsa-200803-32.xml
redhat.com/support/errata/RHSA-2008-0890.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11633
wireshark.org/security/wnpa-sec-2008-01.html
redhat.com/archives/fedora-package-announce/2008-April/msg00228.html
secunia.com/advisories/29188
Show 82 moreShow less
secunia.com/advisories/29242
secunia.com/advisories/29511
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14784
lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
securityfocus.com/archive/1/488967/100/0/threaded
securitytracker.com/id?1019515
wiki.rpath.com/wiki/Advisories:rPSA-2008-0092
support.avaya.com/elmodocs2/security/ASA-2008-392.htm
secunia.com/advisories/32091
secunia.com/advisories/29736
vupen.com/english/advisories/2008/2773
issues.rpath.com/browse/RPL-2296
vupen.com/english/advisories/2008/0704
securityfocus.com/bid/28025
mandriva.com/security/advisories?name=MDVSA-2008:057
secunia.com/advisories/29156
redhat.com/archives/fedora-package-announce/2008-April/msg00140.html
secunia.com/advisories/29223
nvd.nist.gov/vuln/detail/CVE-2008-1071
github.com/advisories/GHSA-gwf6-x6vr-hh5m
security-tracker.debian.org/tracker/CVE-2008-1071
access.redhat.com/errata/RHSA-2008:0890
access.redhat.com/security/updates/classification
wireshark.org/docs/relnotes
wireshark.org/security
bugzilla.redhat.com/show_bug.cgi?id=435481
bugzilla.redhat.com/show_bug.cgi?id=435482
bugzilla.redhat.com/show_bug.cgi?id=435483
bugzilla.redhat.com/show_bug.cgi?id=439943
bugzilla.redhat.com/show_bug.cgi?id=440014
bugzilla.redhat.com/show_bug.cgi?id=440015
bugzilla.redhat.com/show_bug.cgi?id=448584
bugzilla.redhat.com/show_bug.cgi?id=454970
bugzilla.redhat.com/show_bug.cgi?id=454971
bugzilla.redhat.com/show_bug.cgi?id=454975
bugzilla.redhat.com/show_bug.cgi?id=454984
bugzilla.redhat.com/show_bug.cgi?id=461242
bugzilla.redhat.com/show_bug.cgi?id=461243
bugzilla.redhat.com/show_bug.cgi?id=461244
bugzilla.redhat.com/show_bug.cgi?id=461245
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0890.json
access.redhat.com/security/cve/CVE-2008-1070
cve.org/CVERecord?id=CVE-2008-1070
nvd.nist.gov/vuln/detail/CVE-2008-1070
access.redhat.com/security/cve/CVE-2008-1071
cve.org/CVERecord?id=CVE-2008-1071
access.redhat.com/security/cve/CVE-2008-1072
cve.org/CVERecord?id=CVE-2008-1072
nvd.nist.gov/vuln/detail/CVE-2008-1072
access.redhat.com/security/cve/CVE-2008-1561
cve.org/CVERecord?id=CVE-2008-1561
nvd.nist.gov/vuln/detail/CVE-2008-1561
access.redhat.com/security/cve/CVE-2008-1562
cve.org/CVERecord?id=CVE-2008-1562
nvd.nist.gov/vuln/detail/CVE-2008-1562
access.redhat.com/security/cve/CVE-2008-1563
cve.org/CVERecord?id=CVE-2008-1563
nvd.nist.gov/vuln/detail/CVE-2008-1563
access.redhat.com/security/cve/CVE-2008-3137
cve.org/CVERecord?id=CVE-2008-3137
nvd.nist.gov/vuln/detail/CVE-2008-3137
access.redhat.com/security/cve/CVE-2008-3138
cve.org/CVERecord?id=CVE-2008-3138
nvd.nist.gov/vuln/detail/CVE-2008-3138
access.redhat.com/security/cve/CVE-2008-3141
cve.org/CVERecord?id=CVE-2008-3141
nvd.nist.gov/vuln/detail/CVE-2008-3141
access.redhat.com/security/cve/CVE-2008-3145
cve.org/CVERecord?id=CVE-2008-3145
nvd.nist.gov/vuln/detail/CVE-2008-3145
access.redhat.com/security/cve/CVE-2008-3146
cve.org/CVERecord?id=CVE-2008-3146
nvd.nist.gov/vuln/detail/CVE-2008-3146
access.redhat.com/security/cve/CVE-2008-3932
cve.org/CVERecord?id=CVE-2008-3932
nvd.nist.gov/vuln/detail/CVE-2008-3932
access.redhat.com/security/cve/CVE-2008-3933
cve.org/CVERecord?id=CVE-2008-3933
nvd.nist.gov/vuln/detail/CVE-2008-3933
access.redhat.com/security/cve/CVE-2008-3934
cve.org/CVERecord?id=CVE-2008-3934
nvd.nist.gov/vuln/detail/CVE-2008-3934