CVE-2008-1562
The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers...
5.0 MediumPublic exploit
CVE-2008-1562 is a medium vulnerability (CVSS 5.0) in Wireshark, published March 31, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 50.7%, the 98th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 50.7%EPSS, 98th percentile
- Exploitation
- None known2 public exploits
- Fixed in
- No fix listedNo source names one
Description
The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.
Exploit likelihood
50.7%Down 13.8 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
Show 22 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wireshark-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wireshark-gnomeRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:1.0.3-EL3.3 | 0:1.0.3-EL3.3 |
wiresharkRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs | before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs | before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs | before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs | before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs | before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs | before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs | before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs | before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs | before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs | before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs | before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wireshark-gnomeRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs | before 0:1.0.3-3.el4_7 | 0:1.0.3-3.el4_7 |
wiresharkRed Hat:enterprise_linux:5::client_workstation From an advisory covering 14 CVEs | before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 14 CVEs | before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-gnomeRed Hat:enterprise_linux:5::client_workstation From an advisory covering 14 CVEs | before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wiresharkRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs | before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs | before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wiresharkRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs | before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs | before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
wireshark-gnomeRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs | before 0:1.0.3-4.el5_2 | 0:1.0.3-4.el5_2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Wireshark 0.99.8 - LDAP Dissector Denial of Service | 2008-03-28 |
| Metasploit | Wireshark LDAP Dissector DOS | 2008-03-28 |
What each source reports
NVD Score used
The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.
- Record
CVE-2008-1562- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.
- Record
CVE-2008-1562- Updated
- 2026-11-02
EUVDEUVD-2008-1563No score
The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.
- Record
EUVD-2008-1563- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wg7h-v77w-f95gNo score
The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers...
The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.
- Record
GHSA-wg7h-v77w-f95g- Weakness
- CWE-20
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/29622
lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
redhat.com/support/errata/RHSA-2008-0890.html
securityfocus.com/archive/1/490487/100/0/threaded
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14549
Show 81 moreShow less
mandriva.com/security/advisories?name=MDVSA-2008:091
gentoo.org/security/en/glsa/glsa-200805-05.xml
wiki.rpath.com/wiki/Advisories:rPSA-2008-0138
support.avaya.com/elmodocs2/security/ASA-2008-392.htm
vupen.com/english/advisories/2008/2773
securitytracker.com/id?1019728
wireshark.org/security/wnpa-sec-2008-02.html
exchange.xforce.ibmcloud.com/vulnerabilities/41516
issues.rpath.com/browse/RPL-2418
nvd.nist.gov/vuln/detail/CVE-2008-1562
github.com/advisories/GHSA-wg7h-v77w-f95g
access.redhat.com/errata/RHSA-2008:0890
bugzilla.redhat.com/show_bug.cgi?id=435481
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0890.json
cve.org/CVERecord?id=CVE-2008-1070