CVE-2009-3243
Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on...
5.0 MediumPublic exploit
Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote attackers to cause a denial of service (application crash) via unknown vectors related to TLS 1.2 conversations.
Exploit likelihood
7.24%Up 0.5 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote attackers to cause a denial of service (application crash) via unknown vectors related to TLS 1.2 conversations.
- Record
CVE-2009-3243- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote attackers to cause a denial of service (application crash) via unknown vectors related to TLS 1.2 conversations.
- Record
CVE-2009-3243- Updated
- 2026-11-02
EUVDEUVD-2009-3226 No score
Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote attackers to cause a denial of service (application crash) via unknown vectors related to TLS 1.2 conversations.
- Record
EUVD-2009-3226- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7ppr-2cvm-q8gq No score
Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on...
Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote attackers to cause a denial of service (application crash) via unknown vectors related to TLS 1.2 conversations.
- Record
GHSA-7ppr-2cvm-q8gq- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10199-1 No score
wireshark-2.2.2-1.1 on GA media
These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10199-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkopenSUSE:Tumbleweed From an advisory covering 262 CVEs |
before 2.2.2-1.1 | 2.2.2-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Wireshark 1.2.1 - TLS Dissector 1.2 Conversation Handling Remote Denial of Service | 2009-09-15 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3243 is a medium vulnerability (CVSS 5.0) in Wireshark, published September 18, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.24%, the 94th percentile. No source names a fixed version.
References
securityfocus.com/bid/36408
bugs.wireshark.org/bugzilla/show_bug.cgi?id=4008
wireshark.org/security/wnpa-sec-2009-06.html
secunia.com/advisories/36754
Show 194 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6413
nvd.nist.gov/vuln/detail/CVE-2009-3243
github.com/advisories/GHSA-7ppr-2cvm-q8gq
suse.com/security/cve/CVE-2009-1210
This page doesn't list everything
Left out here: 71 references. The JSON record has them.