CVE-2008-3138
The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0...
CVE-2008-3138 is a medium vulnerability (CVSS 5.0) in Wireshark, published July 10, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.00%, the 80th percentile. Fixed in wireshark 1.0.1-1.
The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
5.0
The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors.
- Record
CVE-2008-3138- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors.
- Record
CVE-2008-3138- Updated
- 2026-11-02
EUVDEUVD-2008-3128 No score
The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors.
- Record
EUVD-2008-3128- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8qmr-c2vp-p9wp No score
The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0...
The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors.
- Record
GHSA-8qmr-c2vp-p9wp- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors.
- Record
CVE-2008-3138- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-3138 No score
The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors.
- Record
DEBIAN-CVE-2008-3138- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 1.0.1-1 | 1.0.1-1 |
wiresharkDebian:13 |
before 1.0.1-1 | 1.0.1-1 |
wiresharkDebian:14 |
before 1.0.1-1 | 1.0.1-1 |
wiresharkDebian:4.0 |
before 0.99.4-5.etch.3, plus listed versions 0.99.4-50.99.4-5.etch.00.99.4-5.etch.10.99.4-5.etch.2 |
0.99.4-5.etch.3 |
wiresharkRed Hat:enterprise_linux:3::as |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::as |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:3::desktop |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::desktop |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkRed Hat:enterprise_linux:3::es |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::es |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:3::ws |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::ws |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:4::as |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::as |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:4::desktop |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::desktop |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:4::es |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::es |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:4::ws |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::ws |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:5::client_workstation |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-gnomeRed Hat:enterprise_linux:5::client_workstation |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wiresharkRed Hat:enterprise_linux:5::client |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wiresharkRed Hat:enterprise_linux:5::server |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-gnomeRed Hat:enterprise_linux:5::server |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/30886
lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
secunia.com/advisories/30942
redhat.com/archives/fedora-package-announce/2008-July/msg00544.html
redhat.com/support/errata/RHSA-2008-0890.html
vupen.com/english/advisories/2008/1982/references
Show 81 moreShow less
secunia.com/advisories/31687
wireshark.org/security/wnpa-sec-2008-03.html
security.gentoo.org/glsa/glsa-200808-04.xml
support.avaya.com/elmodocs2/security/ASA-2008-392.htm
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14898
secunia.com/advisories/32091
securityfocus.com/archive/1/493882/100/0/threaded
vupen.com/english/advisories/2008/2773
wiki.rpath.com/wiki/Advisories:rPSA-2008-0212
secunia.com/advisories/32944
securityfocus.com/bid/30020
secunia.com/advisories/31378
exchange.xforce.ibmcloud.com/vulnerabilities/43519
securitytracker.com/id?1020404
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10536
debian.org/security/2008/dsa-1673
secunia.com/advisories/31085
nvd.nist.gov/vuln/detail/CVE-2008-3138
github.com/advisories/GHSA-8qmr-c2vp-p9wp
security-tracker.debian.org/tracker/CVE-2008-3138
access.redhat.com/errata/RHSA-2008:0890
access.redhat.com/security/updates/classification
wireshark.org/docs/relnotes
wireshark.org/security
bugzilla.redhat.com/show_bug.cgi?id=435481
bugzilla.redhat.com/show_bug.cgi?id=435482
bugzilla.redhat.com/show_bug.cgi?id=435483
bugzilla.redhat.com/show_bug.cgi?id=439943
bugzilla.redhat.com/show_bug.cgi?id=440014
bugzilla.redhat.com/show_bug.cgi?id=440015
bugzilla.redhat.com/show_bug.cgi?id=448584
bugzilla.redhat.com/show_bug.cgi?id=454970
bugzilla.redhat.com/show_bug.cgi?id=454971
bugzilla.redhat.com/show_bug.cgi?id=454975
bugzilla.redhat.com/show_bug.cgi?id=454984
bugzilla.redhat.com/show_bug.cgi?id=461242
bugzilla.redhat.com/show_bug.cgi?id=461243
bugzilla.redhat.com/show_bug.cgi?id=461244
bugzilla.redhat.com/show_bug.cgi?id=461245
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0890.json
access.redhat.com/security/cve/CVE-2008-1070
cve.org/CVERecord?id=CVE-2008-1070
nvd.nist.gov/vuln/detail/CVE-2008-1070
access.redhat.com/security/cve/CVE-2008-1071
cve.org/CVERecord?id=CVE-2008-1071
nvd.nist.gov/vuln/detail/CVE-2008-1071
access.redhat.com/security/cve/CVE-2008-1072
cve.org/CVERecord?id=CVE-2008-1072
nvd.nist.gov/vuln/detail/CVE-2008-1072
access.redhat.com/security/cve/CVE-2008-1561
cve.org/CVERecord?id=CVE-2008-1561
nvd.nist.gov/vuln/detail/CVE-2008-1561
access.redhat.com/security/cve/CVE-2008-1562
cve.org/CVERecord?id=CVE-2008-1562
nvd.nist.gov/vuln/detail/CVE-2008-1562
access.redhat.com/security/cve/CVE-2008-1563
cve.org/CVERecord?id=CVE-2008-1563
nvd.nist.gov/vuln/detail/CVE-2008-1563
access.redhat.com/security/cve/CVE-2008-3137
cve.org/CVERecord?id=CVE-2008-3137
nvd.nist.gov/vuln/detail/CVE-2008-3137
access.redhat.com/security/cve/CVE-2008-3138
cve.org/CVERecord?id=CVE-2008-3138
access.redhat.com/security/cve/CVE-2008-3141
cve.org/CVERecord?id=CVE-2008-3141
nvd.nist.gov/vuln/detail/CVE-2008-3141
access.redhat.com/security/cve/CVE-2008-3145
cve.org/CVERecord?id=CVE-2008-3145
nvd.nist.gov/vuln/detail/CVE-2008-3145
access.redhat.com/security/cve/CVE-2008-3146
cve.org/CVERecord?id=CVE-2008-3146
nvd.nist.gov/vuln/detail/CVE-2008-3146
access.redhat.com/security/cve/CVE-2008-3932
cve.org/CVERecord?id=CVE-2008-3932
nvd.nist.gov/vuln/detail/CVE-2008-3932
access.redhat.com/security/cve/CVE-2008-3933
cve.org/CVERecord?id=CVE-2008-3933
nvd.nist.gov/vuln/detail/CVE-2008-3933
access.redhat.com/security/cve/CVE-2008-3934
cve.org/CVERecord?id=CVE-2008-3934
nvd.nist.gov/vuln/detail/CVE-2008-3934