CVE-2009-3241

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-09-18 · updated 2026-06-16

Description

Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets.

Affected products

Wireshark Foundation Wireshark: 0.99.6, 0.99.6a, 0.99.7, 0.99.8, 0.99.9, 1.0 (+12)

References

http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
http://secunia.com/advisories/36754
http://secunia.com/advisories/37409
http://secunia.com/advisories/37477
http://www.debian.org/security/2009/dsa-1942
http://www.securityfocus.com/bid/36408
http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html
http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html
http://www.wireshark.org/security/wnpa-sec-2009-05.html
http://www.wireshark.org/security/wnpa-sec-2009-06.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3986
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6162

Get alerted when CVE-2009-3241 or the next vulnerability affects your stack