Description
Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | wireshark | 0.99.6pre1-1 | — |
| Debian 13 | wireshark | 0.99.6pre1-1 | — |
| Debian 12 | wireshark | 0.99.6pre1-1 | — |
| Debian 4.0 | wireshark | 0.99.4-5.etch.0 | DSA-1322-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | wireshark +1 | 0.99.6-1.el5 | RHSA-2007:0710 |
| RHEL 4 | wireshark +1 | 0.99.6-EL4.1 | RHSA-2007:0709 |
| RHEL 3 | libsmi +1 | 0.4.5-3.el3 | RHSA-2008:0059 |
| RHEL 3 | wireshark +1 | 0.99.7-EL3.1 | RHSA-2008:0059 |
Advisories 4
- RHSA-2007:0710 Red Hat Security Advisory: wireshark security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0059 Red Hat Security Advisory: wireshark security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0709 Red Hat Security Advisory: wireshark security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1322-1 wireshark Debian Security (DSA / DLA) · Mar 9, 2026
References
- 25833 third-party-advisory
- oval:org.mitre.oval:def:10663 vdb-entry signature
- 25877 third-party-advisory
- RHSA-2008:0059 vendor-advisory
- http://www.wireshark.org/security/wnpa-sec-2007-02.html
- RHSA-2007:0710 vendor-advisory
- 26499 third-party-advisory
- 25987 third-party-advisory
- 26004 third-party-advisory
- GLSA-200708-12 vendor-advisory
- RHSA-2007:0709 vendor-advisory
- MDKSA-2007:145 vendor-advisory
- 1018315 vdb-entry
- https://issues.rpath.com/browse/RPL-1498
- 24662 vdb-entry
- 28583 third-party-advisory
- http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html
- ADV-2007-2353 vdb-entry
- 20070814 WireShark MMS Remote Denial of Service vulnerability mailing-list
- DSA-1322 vendor-advisory
- SUSE-SR:2007:015 vendor-advisory
- http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1582
- wireshark-sslmms-dos(35203) vdb-entry