← Vulnerability feed

Vulnerability record · CVE-2008-3146 · published 2 September 2008

CVE-2008-3146: Wireshark memory buffer overflow vulnerability

Wireshark · Wireshark

Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted NCP packet that causes an invalid pointer to be used.

10.0 CVSS 2.0 High EPSS 4.0% · top 9.7% CWE-119 · Memory buffer overflow
10.0CVSS 2.0 base score
4.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
38References
16 Jun 2026Last modified by NVD

Description

Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted NCP packet that causes an invalid pointer to be used.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2675 Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
http://secunia.com/advisories/31687 Vendor Advisory
http://secunia.com/advisories/31864 Vendor Advisory
http://secunia.com/advisories/31886 Vendor Advisory
http://secunia.com/advisories/32028 Vendor Advisory
http://secunia.com/advisories/32091 Vendor Advisory
http://security.gentoo.org/glsa/glsa-200809-17.xml
http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278
http://www.mandriva.com/security/advisories?name=MDVSA-2008:199
http://www.redhat.com/support/errata/RHSA-2008-0890.html
http://www.securityfocus.com/archive/1/496487/100/0/threaded
http://www.securitytracker.com/id?1020819
http://www.vupen.com/english/advisories/2008/2773 Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2008-05.html Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10624
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2675 Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
http://secunia.com/advisories/31687 Vendor Advisory
http://secunia.com/advisories/31864 Vendor Advisory
http://secunia.com/advisories/31886 Vendor Advisory
http://secunia.com/advisories/32028 Vendor Advisory
http://secunia.com/advisories/32091 Vendor Advisory
http://security.gentoo.org/glsa/glsa-200809-17.xml
http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278
http://www.mandriva.com/security/advisories?name=MDVSA-2008:199
http://www.redhat.com/support/errata/RHSA-2008-0890.html
http://www.securityfocus.com/archive/1/496487/100/0/threaded
http://www.securitytracker.com/id?1020819
http://www.vupen.com/english/advisories/2008/2773 Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2008-05.html Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10624
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html

Track CVE-2008-3146 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2011-0444Wireshark memory buffer overflow vulnerabilityBuffer overflow in the MAC-LTE dissector (epan/dissectors/packet-mac-lte.c) in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote a…EPSS 7.2%10.0CVE-2010-2994Wireshark memory buffer overflow vulnerabilityStack-based buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.14 and 1.2.0 through 1.2.9 has unknown impact and remote atta…EPSS 2.4%10.0CVE-2010-2995Wireshark vulnerabilityThe SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause…EPSS 6.7%10.0CVE-2009-1266Wireshark vulnerabilityUnspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors.EPSS 1.6%10.0CVE-2009-1210Wireshark vulnerabilityFormat string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code v…EPSS 15%10.0CVE-2007-6112Wireshark memory buffer overflow vulnerabilityBuffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly e…EPSS 6.2%10.0CVE-2007-6114Wireshark memory buffer overflow vulnerabilityMultiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and poss…EPSS 6.2%10.0CVE-2007-6115Wireshark memory buffer overflow vulnerabilityBuffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running on unspecified platforms, allows remote at…EPSS 6.2%

Source: NIST National Vulnerability Database (record CVE-2008-3146), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.