Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2008-3933

Quick assessment

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Wireshark之前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark (以前叫 Ethereal) 0.10.14 到 1.0.2中允许攻击者通过一个错误的zlib-compressed 数据所触发的无效读取来引发拒绝服务攻击。

AI Predicted 5.3 Difficulty: Moderate EPSS 0.62% · P47 Updated Feb 21, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2008-3933

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet with crafted zlib-compressed data that triggers an invalid read in the tvb_uncompress function.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Wireshark zlib-compressed 错误数据拒绝服务攻击漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2008-3933

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2008-3933

请登录查看更多情报信息。

Vendor Advisories for CVE-2008-3933 (13)

http://secunia.com/advisories/31886 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/32944 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/32091 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/31864 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/32028 third-party-advisory x_refsource_SECUNIA
http://www.securitytracker.com/id?1020819 vdb-entry x_refsource_SECTRACK
http://www.debian.org/security/2008/dsa-1673 vendor-advisory x_refsource_DEBIAN
http://www.vupen.com/english/advisories/2008/2773 vdb-entry x_refsource_VUPEN
http://www.vupen.com/english/advisories/2008/2493 vdb-entry x_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=MDVSA-2008:199 vendor-advisory x_refsource_MANDRIVA
http://security.gentoo.org/glsa/glsa-200809-17.xml vendor-advisory x_refsource_GENTOO
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9620 vdb-entry signature x_refsource_OVAL
http://www.securityfocus.com/archive/1/496487/100/0/threaded mailing-list x_refsource_BUGTRAQ

Other References for CVE-2008-3933 (8)

http://www.wireshark.org/security/wnpa-sec-2008-05.html x_refsource_CONFIRM
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2649 x_refsource_CONFIRM
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2682 x_refsource_MISC
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278 x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2008-0890.html vendor-advisory x_refsource_REDHAT
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html vendor-advisory x_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html vendor-advisory x_refsource_FEDORA

https://www.cve.org/CVERecord?id=CVE-2008-3933

Same Patch Batch · n/a · 2008-09-04 · 36 CVEs total

CVE-2008-3910		Dns2tcp 'dns_decode'函数负值处理缓冲区溢出漏洞
CVE-2008-3931		R 'javareconf' 不安全临时文件创建漏洞
CVE-2007-6716		Linux kernel 安全漏洞
CVE-2008-3904		Lightweight X11 Desktop Environment 'src/main-win.c'任意代码执行漏洞
CVE-2008-3905		Ruby 'resolv.rb' Predictable Transaction ID and Source Port DNS欺骗漏洞
CVE-2008-3906		Mono System.Web模块HTTP头注入漏洞
CVE-2008-3907		Newsbeuter Crafted URI 远程任意外壳指令注入漏洞
CVE-2008-3908		WordNet多个缓冲区溢出漏洞
CVE-2008-3909		Django Login Form 跨站脚本攻击漏洞
CVE-2008-3930		Debian Citadel_server 后置链接漏洞
CVE-2008-3911		Linux Kernel proc_do_xprt()函数本地栈溢出漏洞
CVE-2008-1389		ClamAV chmunpack.c无效内存访问拒绝服务漏洞
CVE-2008-2441		Cisco Secure ACS EAP响应报文解析拒绝服务漏洞
CVE-2008-2732		Cisco PIX ASA 错误SIP处理漏洞
CVE-2008-2733		Cisco ASA IPSec客户端认证处理漏洞
CVE-2008-2734		Cisco ASA SSL VPN 特制报文拒绝服务攻击漏洞
CVE-2008-2735		Cisco ASA SSL VPN 特制报文拒绝服务攻击漏洞
CVE-2008-2736		Cisco ASA VPN信息泄露漏洞
CVE-2008-3922		Telartis_bv Awstats_totals 'awstatstotals.php'代码注入漏洞
CVE-2008-3932		Wireshark 输入验证错误漏洞

Showing top 20 of 36 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2008-3933

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2008-3933

Quick assessment

I. Basic Information for CVE-2008-3933

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2008-3933

III. Intelligence Information for CVE-2008-3933

Vendor Advisories for CVE-2008-3933 (13)

Other References for CVE-2008-3933 (8)

Same Patch Batch · n/a · 2008-09-04 · 36 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2008-3933

Leave a comment