CVE-2008-1563: The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 thr...

Security readout for executives and security teams

CVE-2008-1563 is a denial-of-service flaw in Wireshark's SCCP/BSSAP packet decoding. A malformed packet could crash the application when processed by affected Wireshark versions. The known impact is disruption of packet analysis, not code execution or data theft based on the provided sources. Exposure is most likely on analyst workstations, monitoring systems, or automation using Wireshark or TShark 0.99.6 through 0.99.8 to inspect untrusted captures or traffic. Modern installations are unlikely to be affected unless very old packages remain installed. Prioritize remediation if legacy Wireshark is still used in security operations, telecom analysis, or automated packet-processing workflows. For current environments, this is mainly a legacy hygiene issue with limited known impact. Mitigation focus: Inventory Wireshark and TShark versions across analyst and monitoring systems.; Upgrade affected Wireshark 0.99.6 through 0.99.8 installations using vendor guidance.; Apply relevant distribution advisories from Red Hat, SUSE, Fedora, Mandriva, or Gentoo if applicable..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.