CVE-2008-1562: The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause...

Security readout for executives and security teams

CVE-2008-1562 is a denial-of-service flaw in Wireshark’s LDAP packet parser. A malformed packet can crash vulnerable Wireshark or tshark versions 0.99.2 through 0.99.8. It affects analysis workstations or systems using those tools, not the LDAP service itself. The bundle does not show data theft, code execution, or confirmed active exploitation. Exposure is most likely where legacy Wireshark or tshark versions process live traffic or packet captures containing LDAP data. Modern supported installations are less likely to be affected, but old security appliances, analysis hosts, lab images, or distribution packages should be checked. Treat this as a targeted availability risk to security tooling, not an enterprise-wide compromise issue. Prioritize remediation where packet analysis is operationally important or exposed to untrusted captures. Legacy version discovery is the main business task. Mitigation focus: Inventory Wireshark and tshark versions across workstations, servers, and appliances.; Upgrade affected 0.99.2 through 0.99.8 installations using vendor-supported packages.; Review Wireshark and operating-system vendor advisories for fixed package guidance..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.