Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-3140

24
FAUCET Score

CVE-2008-3140 describes a denial-of-service vulnerability affecting Wireshark (formerly Ethereal) version 1.0.0, specifically within its syslog dissector. Remote attackers can exploit this flaw to crash the application through unknown vectors, potentially involving an "incomplete SS7 MSU syslog encapsulated packet." The vulnerability carries a CVSS score of 5.0, indicating a medium severity with a network-based attack vector, low attack complexity, and a partial impact on availability. While an ExploitDB entry (EDB-32006) exists for multiple Wireshark DoS vulnerabilities, there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage for this specific CVE.

Impacted Technologies

VendorProductVersion(s)CPE
1.0.0CPE matchmatch criteria
cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
4.95%
Probability of exploitation in next 30 days
EPSS Percentile
91.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-32006 · Jun 30, 2008
This CVE's current EPSS score of 0.0495 is in the 88th percentile among its peer group of 23,723 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2008-3140Low

wireshark: crash in the syslog dissector

Jun 30, 2008

References

lists.opensuse.org / opensuse-security-announce/2008-08/msg00006.html
secunia.com / advisories/30886
Vendor Advisory
secunia.com / advisories/30942
secunia.com / advisories/31085
secunia.com / advisories/31378
Vendor Advisory
secunia.com / advisories/31687
Vendor Advisory
security.gentoo.org / glsa/glsa-200808-04.xml
securitytracker.com / id
exchange.xforce.ibmcloud.com / vulnerabilities/43518
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14700
redhat.com / archives/fedora-package-announce/2008-July/msg00544.html
wiki.rpath.com / wiki/Advisories:rPSA-2008-0212
securityfocus.com / archive/1/493882/100/0/threaded
securityfocus.com / bid/30020
vupen.com / english/advisories/2008/1982/references
wireshark.org / security/wnpa-sec-2008-03.html