CVE-2008-4682

wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service ...

5.0 MediumPublic exploitFix available

wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a malformed Tamos CommView capture file (aka .ncf file) with an "unknown/unexpected packet type" that triggers a failed assertion.

Exploit likelihood

9.29%Down 3.3 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2008-4682
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-4682
Updated: 2026-11-02

EUVDEUVD-2008-4662 No score

Record: EUVD-2008-4662
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jf24-554x-42mw No score

wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service ...

Record: GHSA-jf24-554x-42mw
Weakness: CWE-20
Updated: 2026-11-02

OSV No score

Record: CVE-2008-4682
Updated: 2026-11-02

OSVDEBIAN-CVE-2008-4682 No score

Record: DEBIAN-CVE-2008-4682
Updated: 2026-11-02

Affected products

wireshark

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Debian:12	before 1.0.4-1	1.0.4-1
`wireshark` Debian:13	before 1.0.4-1	1.0.4-1
`wireshark` Debian:14	before 1.0.4-1	1.0.4-1
`wireshark` Red Hat:enterprise_linux:3::as From an advisory covering 10 CVEs	before 0:1.0.6-EL3.3	0:1.0.6-EL3.3
`wireshark-debuginfo` Red Hat:enterprise_linux:3::as From an advisory covering 10 CVEs	before 0:1.0.6-EL3.3	0:1.0.6-EL3.3
`wireshark-gnome` Red Hat:enterprise_linux:3::as From an advisory covering 10 CVEs	before 0:1.0.6-EL3.3	0:1.0.6-EL3.3
`wireshark` Red Hat:enterprise_linux:3::desktop From an advisory covering 10 CVEs	before 0:1.0.6-EL3.3	0:1.0.6-EL3.3
`wireshark-debuginfo` Red Hat:enterprise_linux:3::desktop From an advisory covering 10 CVEs	before 0:1.0.6-EL3.3	0:1.0.6-EL3.3
`wireshark-gnome` Red Hat:enterprise_linux:3::desktop From an advisory covering 10 CVEs	before 0:1.0.6-EL3.3	0:1.0.6-EL3.3
`wireshark` Red Hat:enterprise_linux:3::es From an advisory covering 10 CVEs	before 0:1.0.6-EL3.3	0:1.0.6-EL3.3

Show 25 moreShow less

Affected packages
Package	Affected	Fixed
`wireshark-debuginfo` Red Hat:enterprise_linux:3::es From an advisory covering 10 CVEs	before 0:1.0.6-EL3.3	0:1.0.6-EL3.3
`wireshark-gnome` Red Hat:enterprise_linux:3::es From an advisory covering 10 CVEs	before 0:1.0.6-EL3.3	0:1.0.6-EL3.3
`wireshark` Red Hat:enterprise_linux:3::ws From an advisory covering 10 CVEs	before 0:1.0.6-EL3.3	0:1.0.6-EL3.3
`wireshark-debuginfo` Red Hat:enterprise_linux:3::ws From an advisory covering 10 CVEs	before 0:1.0.6-EL3.3	0:1.0.6-EL3.3
`wireshark-gnome` Red Hat:enterprise_linux:3::ws From an advisory covering 10 CVEs	before 0:1.0.6-EL3.3	0:1.0.6-EL3.3
`wireshark` Red Hat:enterprise_linux:4::as From an advisory covering 10 CVEs	before 0:1.0.6-2.el4_7	0:1.0.6-2.el4_7
`wireshark-debuginfo` Red Hat:enterprise_linux:4::as From an advisory covering 10 CVEs	before 0:1.0.6-2.el4_7	0:1.0.6-2.el4_7
`wireshark-gnome` Red Hat:enterprise_linux:4::as From an advisory covering 10 CVEs	before 0:1.0.6-2.el4_7	0:1.0.6-2.el4_7
`wireshark` Red Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs	before 0:1.0.6-2.el4_7	0:1.0.6-2.el4_7
`wireshark-debuginfo` Red Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs	before 0:1.0.6-2.el4_7	0:1.0.6-2.el4_7
`wireshark-gnome` Red Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs	before 0:1.0.6-2.el4_7	0:1.0.6-2.el4_7
`wireshark` Red Hat:enterprise_linux:4::es From an advisory covering 10 CVEs	before 0:1.0.6-2.el4_7	0:1.0.6-2.el4_7
`wireshark-debuginfo` Red Hat:enterprise_linux:4::es From an advisory covering 10 CVEs	before 0:1.0.6-2.el4_7	0:1.0.6-2.el4_7
`wireshark-gnome` Red Hat:enterprise_linux:4::es From an advisory covering 10 CVEs	before 0:1.0.6-2.el4_7	0:1.0.6-2.el4_7
`wireshark` Red Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs	before 0:1.0.6-2.el4_7	0:1.0.6-2.el4_7
`wireshark-debuginfo` Red Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs	before 0:1.0.6-2.el4_7	0:1.0.6-2.el4_7
`wireshark-gnome` Red Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs	before 0:1.0.6-2.el4_7	0:1.0.6-2.el4_7
`wireshark` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs	before 0:1.0.6-2.el5_3	0:1.0.6-2.el5_3
`wireshark-debuginfo` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs	before 0:1.0.6-2.el5_3	0:1.0.6-2.el5_3
`wireshark-gnome` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs	before 0:1.0.6-2.el5_3	0:1.0.6-2.el5_3
`wireshark` Red Hat:enterprise_linux:5::client From an advisory covering 10 CVEs	before 0:1.0.6-2.el5_3	0:1.0.6-2.el5_3
`wireshark-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 10 CVEs	before 0:1.0.6-2.el5_3	0:1.0.6-2.el5_3
`wireshark` Red Hat:enterprise_linux:5::server From an advisory covering 10 CVEs	before 0:1.0.6-2.el5_3	0:1.0.6-2.el5_3
`wireshark-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 10 CVEs	before 0:1.0.6-2.el5_3	0:1.0.6-2.el5_3
`wireshark-gnome` Red Hat:enterprise_linux:5::server From an advisory covering 10 CVEs	before 0:1.0.6-2.el5_3	0:1.0.6-2.el5_3

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Wireshark 1.0.x - '.ncf' Packet Capture Local Denial of Service	2008-09-29

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-4682 is a medium vulnerability (CVSS 5.0) in Wireshark, published October 22, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.29%, the 95th percentile. Fixed in wireshark 1.0.4-1.

References

Show 58 moreShow less