CVE-2008-3146

Опубликовано: 02 сент. 2008

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted NCP packet that causes an invalid pointer to be used.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02345

Низкий

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2008-3146

ubuntu

почти 17 лет назад

CVE-2008-3146

redhat

почти 17 лет назад

CVE-2008-3146

debian

почти 17 лет назад

Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly ...

GHSA-4hp9-6953-26vh

github

около 3 лет назад

ELSA-2008-0890

oracle-oval

больше 16 лет назад

ELSA-2008-0890: wireshark security update (MODERATE)

EPSS

Процентиль: 84%

0.02345

Низкий

10 Critical

CVSS2

Дефекты

CWE-119