CVE-2009-3241

Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1...

7.8 HighPublic exploitFix available

Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets.

Exploit likelihood

9.70%Down 2.9 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

Record: CVE-2009-3241
CVSS 2.0: 7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Updated: 2026-11-02

CVE List No score

Record: CVE-2009-3241
Updated: 2026-11-02

EUVDEUVD-2009-3224 No score

Record: EUVD-2009-3224
Updated: 2026-11-03

GitHub AdvisoriesGHSA-grh9-678v-4762 No score

Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1...

Record: GHSA-grh9-678v-4762
Updated: 2026-11-02

OSV No score

Record: CVE-2009-3241
Updated: 2026-11-02

OSVDEBIAN-CVE-2009-3241 No score

Record: DEBIAN-CVE-2009-3241
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10199-1 No score

wireshark-2.2.2-1.1 on GA media

These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10199-1
Updated: 2026-11-02

Affected products

wireshark

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Debian:12	before 1.2.2-1	1.2.2-1
`wireshark` Debian:13	before 1.2.2-1	1.2.2-1
`wireshark` Debian:14	before 1.2.2-1	1.2.2-1
`wireshark` Debian:4.0 From an advisory covering 6 CVEs	before 0.99.4-5.etch.4, plus listed versions 0.99.4-50.99.4-5.etch.00.99.4-5.etch.10.99.4-5.etch.20.99.4-5.etch.3	0.99.4-5.etch.4
`wireshark` Debian:5.0 From an advisory covering 6 CVEs	before 1.0.2-3+lenny7, plus listed versions 1.0.2-3+lenny31.0.2-3+lenny41.0.2-3+lenny51.0.2-3+lenny6	1.0.2-3+lenny7
`wireshark` openSUSE:Tumbleweed From an advisory covering 262 CVEs	before 2.2.2-1.1	2.2.2-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Wireshark 1.2.1 - OpcUa Dissector Resource Exhaustion (Denial of Service)	2009-09-15

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-3241 is a high vulnerability (CVSS 7.8) in Wireshark, published September 18, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.70%, the 95th percentile. Fixed in wireshark 1.2.2-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 77 references. The JSON record has them.