CVE-2008-3140
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a...
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."
Exploit likelihood
What each source reports
NVD Score used
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."
- Record
CVE-2008-3140- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."
- Record
CVE-2008-3140- Updated
- 2026-11-02
EUVDEUVD-2008-3130 No score
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."
- Record
EUVD-2008-3130- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fxxv-cmpr-cvx2 No score
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a...
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."
- Record
GHSA-fxxv-cmpr-cvx2- Updated
- 2026-11-02
OSV No score
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."
- Record
CVE-2008-3140- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-3140 No score
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."
- Record
DEBIAN-CVE-2008-3140- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Wireshark 1.0.0 - Multiple Denial of Service Vulnerabilities | 2008-06-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3140 is a medium vulnerability (CVSS 5.0) in Wireshark, published July 10, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.95%, the 92nd percentile. Fixed in wireshark 1.0.1-1.
References
secunia.com/advisories/30886
lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
redhat.com/archives/fedora-package-announce/2008-July/msg00544.html
vupen.com/english/advisories/2008/1982/references
Show 13 moreShow less
wireshark.org/security/wnpa-sec-2008-03.html
security.gentoo.org/glsa/glsa-200808-04.xml
securityfocus.com/archive/1/493882/100/0/threaded
wiki.rpath.com/wiki/Advisories:rPSA-2008-0212
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14700
exchange.xforce.ibmcloud.com/vulnerabilities/43518
securitytracker.com/id?1020404
nvd.nist.gov/vuln/detail/CVE-2008-3140
github.com/advisories/GHSA-fxxv-cmpr-cvx2
security-tracker.debian.org/tracker/CVE-2008-3140