Description
Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | wireshark | 0.99.6pre1-1 | — |
| Debian 13 | wireshark | 0.99.6pre1-1 | — |
| Debian 12 | wireshark | 0.99.6pre1-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | wireshark +1 | 0.99.6-1.el5 | RHSA-2007:0710 |
| RHEL 4 | wireshark +1 | 0.99.6-EL4.1 | RHSA-2007:0709 |
| RHEL 3 | libsmi +1 | 0.4.5-3.el3 | RHSA-2008:0059 |
| RHEL 3 | wireshark +1 | 0.99.7-EL3.1 | RHSA-2008:0059 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Wireshark chunked_encoding_dissector Function DOS
auxiliary/dos/wireshark/chunked
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 3
- RHSA-2007:0710 Red Hat Security Advisory: wireshark security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0059 Red Hat Security Advisory: wireshark security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0709 Red Hat Security Advisory: wireshark security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 25833 third-party-advisory
- 37643 vdb-entry
- RHSA-2008:0059 vendor-advisory
- http://www.wireshark.org/security/wnpa-sec-2007-02.html
- RHSA-2007:0710 vendor-advisory
- 26499 third-party-advisory
- 25987 third-party-advisory
- 26004 third-party-advisory
- GLSA-200708-12 vendor-advisory
- wireshark-chunkedhttp-dos(35207) vdb-entry
- RHSA-2007:0709 vendor-advisory
- MDKSA-2007:145 vendor-advisory
- 27592 third-party-advisory
- oval:org.mitre.oval:def:9964 vdb-entry signature
- 1018315 vdb-entry
- https://issues.rpath.com/browse/RPL-1498
- 24662 vdb-entry
- 28583 third-party-advisory
- http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html
- ADV-2007-2353 vdb-entry
- SUSE-SR:2007:015 vendor-advisory