CVE-2008-3137
The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote...
The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
4.3
The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
- Record
CVE-2008-3137- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
- Record
CVE-2008-3137- Updated
- 2026-11-02
EUVDEUVD-2008-3127 No score
The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
- Record
EUVD-2008-3127- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8mv6-3mvr-36hm No score
The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote...
The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
- Record
GHSA-8mv6-3mvr-36hm- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
- Record
CVE-2008-3137- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-3137 No score
The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
- Record
DEBIAN-CVE-2008-3137- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 1.0.1-1 | 1.0.1-1 |
wiresharkDebian:13 |
before 1.0.1-1 | 1.0.1-1 |
wiresharkDebian:14 |
before 1.0.1-1 | 1.0.1-1 |
wiresharkDebian:4.0 From an advisory covering 8 CVEs |
before 0.99.4-5.etch.3, plus listed versions 0.99.4-50.99.4-5.etch.00.99.4-5.etch.10.99.4-5.etch.2 |
0.99.4-5.etch.3 |
wiresharkRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs |
before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs |
before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:5::client_workstation From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-gnomeRed Hat:enterprise_linux:5::client_workstation From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wiresharkRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wiresharkRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-gnomeRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3137 is a medium vulnerability (CVSS 4.3) in Wireshark, published July 10, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. Fixed in wireshark 1.0.1-1.
References
secunia.com/advisories/30886
lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
secunia.com/advisories/30942
redhat.com/archives/fedora-package-announce/2008-July/msg00544.html
redhat.com/support/errata/RHSA-2008-0890.html
vupen.com/english/advisories/2008/1982/references
Show 80 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10860
secunia.com/advisories/31687
wireshark.org/security/wnpa-sec-2008-03.html
security.gentoo.org/glsa/glsa-200808-04.xml
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15068
support.avaya.com/elmodocs2/security/ASA-2008-392.htm
secunia.com/advisories/32091
securityfocus.com/archive/1/493882/100/0/threaded
vupen.com/english/advisories/2008/2773
wiki.rpath.com/wiki/Advisories:rPSA-2008-0212
secunia.com/advisories/32944
securityfocus.com/bid/30020
secunia.com/advisories/31378
securitytracker.com/id?1020404
debian.org/security/2008/dsa-1673
secunia.com/advisories/31085
nvd.nist.gov/vuln/detail/CVE-2008-3137
github.com/advisories/GHSA-8mv6-3mvr-36hm
security-tracker.debian.org/tracker/CVE-2008-3137
access.redhat.com/errata/RHSA-2008:0890
access.redhat.com/security/updates/classification
wireshark.org/docs/relnotes
wireshark.org/security
bugzilla.redhat.com/show_bug.cgi?id=435481
bugzilla.redhat.com/show_bug.cgi?id=435482
bugzilla.redhat.com/show_bug.cgi?id=435483
bugzilla.redhat.com/show_bug.cgi?id=439943
bugzilla.redhat.com/show_bug.cgi?id=440014
bugzilla.redhat.com/show_bug.cgi?id=440015
bugzilla.redhat.com/show_bug.cgi?id=448584
bugzilla.redhat.com/show_bug.cgi?id=454970
bugzilla.redhat.com/show_bug.cgi?id=454971
bugzilla.redhat.com/show_bug.cgi?id=454975
bugzilla.redhat.com/show_bug.cgi?id=454984
bugzilla.redhat.com/show_bug.cgi?id=461242
bugzilla.redhat.com/show_bug.cgi?id=461243
bugzilla.redhat.com/show_bug.cgi?id=461244
bugzilla.redhat.com/show_bug.cgi?id=461245
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0890.json
access.redhat.com/security/cve/CVE-2008-1070
cve.org/CVERecord?id=CVE-2008-1070
nvd.nist.gov/vuln/detail/CVE-2008-1070
access.redhat.com/security/cve/CVE-2008-1071
cve.org/CVERecord?id=CVE-2008-1071
nvd.nist.gov/vuln/detail/CVE-2008-1071
access.redhat.com/security/cve/CVE-2008-1072
cve.org/CVERecord?id=CVE-2008-1072
nvd.nist.gov/vuln/detail/CVE-2008-1072
access.redhat.com/security/cve/CVE-2008-1561
cve.org/CVERecord?id=CVE-2008-1561
nvd.nist.gov/vuln/detail/CVE-2008-1561
access.redhat.com/security/cve/CVE-2008-1562
cve.org/CVERecord?id=CVE-2008-1562
nvd.nist.gov/vuln/detail/CVE-2008-1562
access.redhat.com/security/cve/CVE-2008-1563
cve.org/CVERecord?id=CVE-2008-1563
nvd.nist.gov/vuln/detail/CVE-2008-1563
access.redhat.com/security/cve/CVE-2008-3137
cve.org/CVERecord?id=CVE-2008-3137
access.redhat.com/security/cve/CVE-2008-3138
cve.org/CVERecord?id=CVE-2008-3138
nvd.nist.gov/vuln/detail/CVE-2008-3138
access.redhat.com/security/cve/CVE-2008-3141
cve.org/CVERecord?id=CVE-2008-3141
nvd.nist.gov/vuln/detail/CVE-2008-3141
access.redhat.com/security/cve/CVE-2008-3145
cve.org/CVERecord?id=CVE-2008-3145
nvd.nist.gov/vuln/detail/CVE-2008-3145
access.redhat.com/security/cve/CVE-2008-3146
cve.org/CVERecord?id=CVE-2008-3146
nvd.nist.gov/vuln/detail/CVE-2008-3146
access.redhat.com/security/cve/CVE-2008-3932
cve.org/CVERecord?id=CVE-2008-3932
nvd.nist.gov/vuln/detail/CVE-2008-3932
access.redhat.com/security/cve/CVE-2008-3933
cve.org/CVERecord?id=CVE-2008-3933
nvd.nist.gov/vuln/detail/CVE-2008-3933
access.redhat.com/security/cve/CVE-2008-3934
cve.org/CVERecord?id=CVE-2008-3934
nvd.nist.gov/vuln/detail/CVE-2008-3934