Skip to content
OpenAdvisories
Unscored RHSA-2008:0890 14 CVEs

Red Hat Security Advisory: wireshark security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as wireshark 0:1.0.3-EL3.3
Red Hat · RHEL 3 enterprise_linux:3::as wireshark-debuginfo 0:1.0.3-EL3.3
Red Hat · RHEL 3 enterprise_linux:3::as wireshark-gnome 0:1.0.3-EL3.3
Red Hat · RHEL 3 enterprise_linux:3::desktop wireshark 0:1.0.3-EL3.3
Red Hat · RHEL 3 enterprise_linux:3::desktop wireshark-debuginfo 0:1.0.3-EL3.3
Red Hat · RHEL 3 enterprise_linux:3::desktop wireshark-gnome 0:1.0.3-EL3.3
Red Hat · RHEL 3 enterprise_linux:3::es wireshark 0:1.0.3-EL3.3
Red Hat · RHEL 3 enterprise_linux:3::es wireshark-debuginfo 0:1.0.3-EL3.3
Red Hat · RHEL 3 enterprise_linux:3::es wireshark-gnome 0:1.0.3-EL3.3
Red Hat · RHEL 3 enterprise_linux:3::ws wireshark 0:1.0.3-EL3.3
Red Hat · RHEL 3 enterprise_linux:3::ws wireshark-debuginfo 0:1.0.3-EL3.3
Red Hat · RHEL 3 enterprise_linux:3::ws wireshark-gnome 0:1.0.3-EL3.3
Red Hat · RHEL 4 enterprise_linux:4::as wireshark 0:1.0.3-3.el4_7
Red Hat · RHEL 4 enterprise_linux:4::as wireshark-debuginfo 0:1.0.3-3.el4_7
Red Hat · RHEL 4 enterprise_linux:4::as wireshark-gnome 0:1.0.3-3.el4_7
Red Hat · RHEL 4 enterprise_linux:4::desktop wireshark 0:1.0.3-3.el4_7
Red Hat · RHEL 4 enterprise_linux:4::desktop wireshark-debuginfo 0:1.0.3-3.el4_7
Red Hat · RHEL 4 enterprise_linux:4::desktop wireshark-gnome 0:1.0.3-3.el4_7
Red Hat · RHEL 4 enterprise_linux:4::es wireshark 0:1.0.3-3.el4_7
Red Hat · RHEL 4 enterprise_linux:4::es wireshark-debuginfo 0:1.0.3-3.el4_7
Red Hat · RHEL 4 enterprise_linux:4::es wireshark-gnome 0:1.0.3-3.el4_7
Red Hat · RHEL 4 enterprise_linux:4::ws wireshark 0:1.0.3-3.el4_7
Red Hat · RHEL 4 enterprise_linux:4::ws wireshark-debuginfo 0:1.0.3-3.el4_7
Red Hat · RHEL 4 enterprise_linux:4::ws wireshark-gnome 0:1.0.3-3.el4_7
Red Hat · RHEL 5 enterprise_linux:5::client wireshark 0:1.0.3-4.el5_2
Red Hat · RHEL 5 enterprise_linux:5::client wireshark-debuginfo 0:1.0.3-4.el5_2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation wireshark 0:1.0.3-4.el5_2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation wireshark-debuginfo 0:1.0.3-4.el5_2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation wireshark-gnome 0:1.0.3-4.el5_2
Red Hat · RHEL 5 enterprise_linux:5::server wireshark 0:1.0.3-4.el5_2
Red Hat · RHEL 5 enterprise_linux:5::server wireshark-debuginfo 0:1.0.3-4.el5_2
Red Hat · RHEL 5 enterprise_linux:5::server wireshark-gnome 0:1.0.3-4.el5_2

Vulnerabilities 14

  • Unscored —
    CVE-2008-1070

    The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of …

    wireshark Debian
  • Unscored —
    CVE-2008-1071

    The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of …

    wireshark Debian
  • Unscored —
    CVE-2008-1072

    The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote at…

    wireshark Debian
  • Unscored —
    CVE-2008-1561 Public exploit

    Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to c…

    wireshark Debian
  • Unscored —
    CVE-2008-1562 Public exploit EPSS 51%

    The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2008-1563 Public exploit

    The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 …

    wireshark Debian
  • Unscored —
    CVE-2008-3137

    The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial o…

    wireshark Debian
  • Unscored —
    CVE-2008-3138

    The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to …

    wireshark Debian
  • Unscored —
    CVE-2008-3141

    Unspecified vulnerability in the RMI dissector in Wireshark (formerly Ethereal) 0.9.5 through 1.0.0 allows remote attac…

    wireshark Debian
  • Unscored —
    CVE-2008-3145

    The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause …

    wireshark Debian
  • Unscored —
    CVE-2008-3146

    Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to…

    wireshark Debian
  • Unscored —
    CVE-2008-3932

    Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allows attackers to cause a denial of service (hang) via a crafted NC…

    wireshark Debian
  • Unscored —
    CVE-2008-3933

    Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet …

    wireshark Debian
  • Unscored —
    CVE-2008-3934

    Unspecified vulnerability in Wireshark (formerly Ethereal) 0.99.6 through 1.0.2 allows attackers to cause a denial of s…

    wireshark Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://www.wireshark.org/docs/relnotes/
  • article
    http://www.wireshark.org/security/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=435481
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=435482
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=435483
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=439943
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440014
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440015
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=448584
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=454970
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=454971
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=454975
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=454984
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=461242
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=461243
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=461244
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=461245
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0890.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-1070
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1070
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1070
  • report
    https://access.redhat.com/security/cve/CVE-2008-1071
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1071
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1071
  • report
    https://access.redhat.com/security/cve/CVE-2008-1072
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1072
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1072
  • report
    https://access.redhat.com/security/cve/CVE-2008-1561
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1561
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1561
  • report
    https://access.redhat.com/security/cve/CVE-2008-1562
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1562
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1562
  • report
    https://access.redhat.com/security/cve/CVE-2008-1563
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1563
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1563
  • report
    https://access.redhat.com/security/cve/CVE-2008-3137
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3137