Vulnerability-Lookup

CVE-2006-4333 (GCVE-0-2006-4333)

Vulnerability from cvelistv5 – Published: 2006-08-24 20:00 – Updated: 2024-08-07 19:06

Summary

The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1085 records in the last 180 days details

References

22 references

URL	Tags
http://www.vupen.com/english/advisories/2006/3370	vdb-entryx_refsource_VUPEN
https://issues.rpath.com/browse/RPL-597	x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://secunia.com/advisories/21682	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/bid/19690	vdb-entryx_refsource_BID
http://securitytracker.com/id?1016736	vdb-entryx_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2006-06…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/21649	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.debian.org/security/2006/dsa-1171	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/21813	third-party-advisoryx_refsource_SECUNIA
http://www.wireshark.org/security/wnpa-sec-2006-02.html	x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/696896	third-party-advisoryx_refsource_CERT-VN
http://secunia.com/advisories/21619	third-party-advisoryx_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200608-26.xml	vendor-advisoryx_refsource_GENTOO
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/21885	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21597	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/444323/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/22378	third-party-advisoryx_refsource_SECUNIA

Date Public

2006-08-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:06:07.371Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2006-3370",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3370"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-597"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm"
          },
          {
            "name": "21682",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21682"
          },
          {
            "name": "oval:org.mitre.oval:def:11801",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801"
          },
          {
            "name": "19690",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19690"
          },
          {
            "name": "1016736",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016736"
          },
          {
            "name": "RHSA-2006:0658",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0658.html"
          },
          {
            "name": "21649",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21649"
          },
          {
            "name": "MDKSA-2006:152",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152"
          },
          {
            "name": "wireshark-sscop-dos(28556)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556"
          },
          {
            "name": "DSA-1171",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1171"
          },
          {
            "name": "21813",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21813"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.wireshark.org/security/wnpa-sec-2006-02.html"
          },
          {
            "name": "VU#696896",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/696896"
          },
          {
            "name": "21619",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21619"
          },
          {
            "name": "GLSA-200608-26",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200608-26.xml"
          },
          {
            "name": "wireshark-esp-offbyone(28553)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553"
          },
          {
            "name": "21885",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21885"
          },
          {
            "name": "21597",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21597"
          },
          {
            "name": "20060825 rPSA-2006-0158-1 tshark wireshark",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/444323/100/0/threaded"
          },
          {
            "name": "22378",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22378"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-08-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-17T20:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "ADV-2006-3370",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3370"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-597"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm"
        },
        {
          "name": "21682",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21682"
        },
        {
          "name": "oval:org.mitre.oval:def:11801",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801"
        },
        {
          "name": "19690",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19690"
        },
        {
          "name": "1016736",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016736"
        },
        {
          "name": "RHSA-2006:0658",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0658.html"
        },
        {
          "name": "21649",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21649"
        },
        {
          "name": "MDKSA-2006:152",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152"
        },
        {
          "name": "wireshark-sscop-dos(28556)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556"
        },
        {
          "name": "DSA-1171",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1171"
        },
        {
          "name": "21813",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21813"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.wireshark.org/security/wnpa-sec-2006-02.html"
        },
        {
          "name": "VU#696896",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/696896"
        },
        {
          "name": "21619",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21619"
        },
        {
          "name": "GLSA-200608-26",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200608-26.xml"
        },
        {
          "name": "wireshark-esp-offbyone(28553)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553"
        },
        {
          "name": "21885",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21885"
        },
        {
          "name": "21597",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21597"
        },
        {
          "name": "20060825 rPSA-2006-0158-1 tshark wireshark",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/444323/100/0/threaded"
        },
        {
          "name": "22378",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22378"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-4333",
    "datePublished": "2006-08-24T20:00:00.000Z",
    "dateReserved": "2006-08-24T00:00:00.000Z",
    "dateUpdated": "2024-08-07T19:06:07.371Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2006-4333",
      "date": "2026-11-01",
      "epss": "0.04012",
      "percentile": "0.90562"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
                  "matchCriteriaId": "BD4F19A6-98D5-4B6A-8AF0-D88561D50296",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
                  "matchCriteriaId": "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
                  "matchCriteriaId": "503E7F73-0E2A-442C-9B76-679A2AD03052",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "E3C422E5-3252-48C2-B4FF-E32AA5463D97",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
                  "matchCriteriaId": "31C43A78-E578-4B1C-8E33-24529E973E30",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory."
        },
        {
          "lang": "es",
          "value": "El analizador SSCOP en Wireshark (anteriormente  Ethereal) anterior a 0.99.3 permite a atacantes ermotos provocar una denegaci\u00f3n de servicio (agotamiento de recursos) mediante paquetes mal formados que provocan que el analizador Q.2391 utilice demasiada memoria."
        }
      ],
      "id": "CVE-2006-4333",
      "lastModified": "2024-11-21T00:15:41.940",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "HIGH",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 5.4,
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 4.9,
            "impactScore": 6.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2006-08-24T20:04:00.000",
      "references": [
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/21597"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/21619"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/21649"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/21682"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/21813"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/21885"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/22378"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://security.gentoo.org/glsa/glsa-200608-26.xml"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Patch"
          ],
          "url": "http://securitytracker.com/id?1016736"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.debian.org/security/2006/dsa-1171"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.kb.cert.org/vuls/id/696896"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0658.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/archive/1/444323/100/0/threaded"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Patch"
          ],
          "url": "http://www.securityfocus.com/bid/19690"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.vupen.com/english/advisories/2006/3370"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Patch"
          ],
          "url": "http://www.wireshark.org/security/wnpa-sec-2006-02.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://issues.rpath.com/browse/RPL-597"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/21597"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/21619"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/21649"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/21682"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/21813"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/21885"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/22378"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://security.gentoo.org/glsa/glsa-200608-26.xml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch"
          ],
          "url": "http://securitytracker.com/id?1016736"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.debian.org/security/2006/dsa-1171"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.kb.cert.org/vuls/id/696896"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0658.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/archive/1/444323/100/0/threaded"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch"
          ],
          "url": "http://www.securityfocus.com/bid/19690"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2006/3370"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch"
          ],
          "url": "http://www.wireshark.org/security/wnpa-sec-2006-02.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://issues.rpath.com/browse/RPL-597"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801"
        }
      ],
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-399"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BD4F19A6-98D5-4B6A-8AF0-D88561D50296",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
                    "matchCriteriaId": "503E7F73-0E2A-442C-9B76-679A2AD03052",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E3C422E5-3252-48C2-B4FF-E32AA5463D97",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "31C43A78-E578-4B1C-8E33-24529E973E30",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory."
          },
          {
            "lang": "es",
            "value": "El analizador SSCOP en Wireshark (anteriormente  Ethereal) anterior a 0.99.3 permite a atacantes ermotos provocar una denegaci\u00f3n de servicio (agotamiento de recursos) mediante paquetes mal formados que provocan que el analizador Q.2391 utilice demasiada memoria."
          }
        ],
        "id": "CVE-2006-4333",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "HIGH",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 5.4,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 4.9,
              "impactScore": 6.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2006-08-24T20:04:00.000",
        "references": [
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/21597"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/21619"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/21649"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/21682"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/21813"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/21885"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/22378"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://security.gentoo.org/glsa/glsa-200608-26.xml"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "http://securitytracker.com/id?1016736"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.debian.org/security/2006/dsa-1171"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/696896"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0658.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/archive/1/444323/100/0/threaded"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "http://www.securityfocus.com/bid/19690"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.vupen.com/english/advisories/2006/3370"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "http://www.wireshark.org/security/wnpa-sec-2006-02.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://issues.rpath.com/browse/RPL-597"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/21597"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/21619"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/21649"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/21682"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/21813"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/21885"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/22378"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://security.gentoo.org/glsa/glsa-200608-26.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://securitytracker.com/id?1016736"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2006/dsa-1171"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/696896"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0658.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/444323/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://www.securityfocus.com/bid/19690"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2006/3370"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://www.wireshark.org/security/wnpa-sec-2006-02.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://issues.rpath.com/browse/RPL-597"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-399"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T13:24:18+00:00",
      "cve": "CVE-2006-4333",
      "id": "CVE-2006-4333",
      "initial_release_date": "2006-08-23T00:00:00+00:00",
      "product_status:fixed": "152",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "security flaw",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2006/cve-2006-4333.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2023-02-15T06:14:28Z",
      "cve": "CVE-2006-4333",
      "id": "CVE-2006-4333",
      "initial_release_date": "2023-02-15T06:14:28Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2006-4333",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2006-4333.json",
      "version": "2"
    }
  }
}

CERTA-2006-AVI-373

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités ont été identifiées dans Wireshark (Ethereal). Elles permettraient à une personne malveillante distante, de provoquer une perturbation du service ou d'exécuter des commandes arbitraires sur le système utilisant une version vulnérable.

Description

Ethereal est un logiciel de capture et d'analyse de trafic réseau. Le projet Ethereal a été interrompu, et son développement se poursuit maintenant sous le nom de Wireshark. Plusieurs vulnérabilités ont été identifiées dans ce dernier :

l'interpréteur de données au format protocolaire SCSI (Small Computer System Interface) n'effectuerait pas correctement sa tâche et pourrait être interrompu sous certaines conditions ;
l'interpréteur du protocole DHCP pourrait provoquer une erreur dans la bibliothèque Glib et perturber le système vulnérable, au cours de la manipulation de certaines données ;
la manipulation d'IPsec ESP entraînerait des erreurs lors du déchiffrement de certaines données ;
des données respectant le protocole Q.2931 (utilisé pour la signalisation du RNIS à large bande B-ISDN) seraient manipulées de manière non correcte par l'interpréteur SSCOP. Cette vulnérabilité pourrait entraîner un débordement de mémoire.

Ces vulnérabilités peuvent être exploitées par une personne malveillante distante : il lui faut envoyer des paquets spécialement conçus à destination d'un système vulnérable pour provoquer une perturbation du service Wireshark (Ethereal) et d'exécuter des commandes arbitraires.

Solution

Se référer au bulletin de sécurité du projet Wireshark pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Wireshark	Wireshark	Les versions Ethereal/Wireshark antérieures à 0.99.3.

References

Title

Publication Time

CERTA-2006-AVI-373

Vulnerability from certfr_avis - Published: - Updated:

Description

l'interpréteur de données au format protocolaire SCSI (Small Computer System Interface) n'effectuerait pas correctement sa tâche et pourrait être interrompu sous certaines conditions ;
l'interpréteur du protocole DHCP pourrait provoquer une erreur dans la bibliothèque Glib et perturber le système vulnérable, au cours de la manipulation de certaines données ;
la manipulation d'IPsec ESP entraînerait des erreurs lors du déchiffrement de certaines données ;
des données respectant le protocole Q.2931 (utilisé pour la signalisation du RNIS à large bande B-ISDN) seraient manipulées de manière non correcte par l'interpréteur SSCOP. Cette vulnérabilité pourrait entraîner un débordement de mémoire.

Solution

Se référer au bulletin de sécurité du projet Wireshark pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Wireshark	Wireshark	Les versions Ethereal/Wireshark antérieures à 0.99.3.

References

Title

Publication Time

FKIE_CVE-2006-4333

Vulnerability from fkie_nvd - Published: 2006-08-24 20:04 - Updated: 2026-06-16 22:28

Severity

Summary

References

URL	Tags
secalert@redhat.com	http://secunia.com/advisories/21597	Patch, Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/21619
secalert@redhat.com	http://secunia.com/advisories/21649
secalert@redhat.com	http://secunia.com/advisories/21682
secalert@redhat.com	http://secunia.com/advisories/21813
secalert@redhat.com	http://secunia.com/advisories/21885
secalert@redhat.com	http://secunia.com/advisories/22378
secalert@redhat.com	http://security.gentoo.org/glsa/glsa-200608-26.xml
secalert@redhat.com	http://securitytracker.com/id?1016736	Patch
secalert@redhat.com	http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm
secalert@redhat.com	http://www.debian.org/security/2006/dsa-1171
secalert@redhat.com	http://www.kb.cert.org/vuls/id/696896	US Government Resource
secalert@redhat.com	http://www.mandriva.com/security/advisories?name=MDKSA-2006:152
secalert@redhat.com	http://www.redhat.com/support/errata/RHSA-2006-0658.html
secalert@redhat.com	http://www.securityfocus.com/archive/1/444323/100/0/threaded
secalert@redhat.com	http://www.securityfocus.com/bid/19690	Patch
secalert@redhat.com	http://www.vupen.com/english/advisories/2006/3370
secalert@redhat.com	http://www.wireshark.org/security/wnpa-sec-2006-02.html	Patch
secalert@redhat.com	https://exchange.xforce.ibmcloud.com/vulnerabilities/28553
secalert@redhat.com	https://exchange.xforce.ibmcloud.com/vulnerabilities/28556
secalert@redhat.com	https://issues.rpath.com/browse/RPL-597
secalert@redhat.com	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/21597	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/21619
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/21649
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/21682
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/21813
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/21885
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/22378
af854a3a-2127-422b-91ae-364da2661108	http://security.gentoo.org/glsa/glsa-200608-26.xml
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1016736	Patch
af854a3a-2127-422b-91ae-364da2661108	http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2006/dsa-1171
af854a3a-2127-422b-91ae-364da2661108	http://www.kb.cert.org/vuls/id/696896	US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2006:152
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2006-0658.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/444323/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/19690	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2006/3370
af854a3a-2127-422b-91ae-364da2661108	http://www.wireshark.org/security/wnpa-sec-2006-02.html	Patch
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/28553
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/28556
af854a3a-2127-422b-91ae-364da2661108	https://issues.rpath.com/browse/RPL-597
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801

Impacted products

Vendor	Product	Version
wireshark	wireshark	0.10.4
wireshark	wireshark	0.10.13
wireshark	wireshark	0.99
wireshark	wireshark	0.99.1
wireshark	wireshark	0.99.2

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD4F19A6-98D5-4B6A-8AF0-D88561D50296",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6D5E65C-08BF-480D-A7BE-1876E9AC93E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
              "matchCriteriaId": "503E7F73-0E2A-442C-9B76-679A2AD03052",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3C422E5-3252-48C2-B4FF-E32AA5463D97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "31C43A78-E578-4B1C-8E33-24529E973E30",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory."
    },
    {
      "lang": "es",
      "value": "El analizador SSCOP en Wireshark (anteriormente  Ethereal) anterior a 0.99.3 permite a atacantes ermotos provocar una denegaci\u00f3n de servicio (agotamiento de recursos) mediante paquetes mal formados que provocan que el analizador Q.2391 utilice demasiada memoria."
    }
  ],
  "id": "CVE-2006-4333",
  "lastModified": "2026-06-16T22:28:52.477",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 5.4,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-08-24T20:04:00.000",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21597"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/21619"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/21649"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/21682"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/21813"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/21885"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/22378"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://security.gentoo.org/glsa/glsa-200608-26.xml"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://securitytracker.com/id?1016736"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.debian.org/security/2006/dsa-1171"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/696896"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0658.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/444323/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/19690"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2006/3370"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://www.wireshark.org/security/wnpa-sec-2006-02.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://issues.rpath.com/browse/RPL-597"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21597"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/21619"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/21649"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/21682"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/21813"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/21885"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/22378"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200608-26.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://securitytracker.com/id?1016736"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2006/dsa-1171"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/696896"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0658.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/444323/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/19690"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/3370"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.wireshark.org/security/wnpa-sec-2006-02.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.rpath.com/browse/RPL-597"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-JHFX-PFVP-J6F3

Vulnerability from github – Published: 2022-05-01 07:17 – Updated: 2022-05-01 07:17

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2006-4333"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-08-24T20:04:00Z",
    "severity": "MODERATE"
  },
  "details": "The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.",
  "id": "GHSA-jhfx-pfvp-j6f3",
  "modified": "2022-05-01T07:17:41Z",
  "published": "2022-05-01T07:17:41Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4333"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556"
    },
    {
      "type": "WEB",
      "url": "https://issues.rpath.com/browse/RPL-597"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21597"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21619"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21649"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21682"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21813"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21885"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/22378"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200608-26.xml"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1016736"
    },
    {
      "type": "WEB",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2006/dsa-1171"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/696896"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0658.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/444323/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/19690"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/3370"
    },
    {
      "type": "WEB",
      "url": "http://www.wireshark.org/security/wnpa-sec-2006-02.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2006-4333

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2006-4333

Aliases

CVE-2006-4333

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2006-4333",
    "description": "The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.",
    "id": "GSD-2006-4333",
    "references": [
      "https://www.suse.com/security/cve/CVE-2006-4333.html",
      "https://www.debian.org/security/2006/dsa-1171",
      "https://access.redhat.com/errata/RHSA-2006:0658",
      "https://linux.oracle.com/cve/CVE-2006-4333.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2006-4333"
      ],
      "details": "The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.",
      "id": "GSD-2006-4333",
      "modified": "2023-12-13T01:19:51.283967Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2006-4333",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://secunia.com/advisories/21813",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/21813"
          },
          {
            "name": "http://www.debian.org/security/2006/dsa-1171",
            "refsource": "MISC",
            "url": "http://www.debian.org/security/2006/dsa-1171"
          },
          {
            "name": "http://secunia.com/advisories/21597",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/21597"
          },
          {
            "name": "http://secunia.com/advisories/21619",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/21619"
          },
          {
            "name": "http://secunia.com/advisories/21649",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/21649"
          },
          {
            "name": "http://secunia.com/advisories/21682",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/21682"
          },
          {
            "name": "http://secunia.com/advisories/21885",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/21885"
          },
          {
            "name": "http://secunia.com/advisories/22378",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/22378"
          },
          {
            "name": "http://security.gentoo.org/glsa/glsa-200608-26.xml",
            "refsource": "MISC",
            "url": "http://security.gentoo.org/glsa/glsa-200608-26.xml"
          },
          {
            "name": "http://securitytracker.com/id?1016736",
            "refsource": "MISC",
            "url": "http://securitytracker.com/id?1016736"
          },
          {
            "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm",
            "refsource": "MISC",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2006-0658.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0658.html"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/444323/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/444323/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/bid/19690",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/19690"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2006/3370",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2006/3370"
          },
          {
            "name": "http://www.wireshark.org/security/wnpa-sec-2006-02.html",
            "refsource": "MISC",
            "url": "http://www.wireshark.org/security/wnpa-sec-2006-02.html"
          },
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553"
          },
          {
            "name": "https://issues.rpath.com/browse/RPL-597",
            "refsource": "MISC",
            "url": "https://issues.rpath.com/browse/RPL-597"
          },
          {
            "name": "http://www.kb.cert.org/vuls/id/696896",
            "refsource": "MISC",
            "url": "http://www.kb.cert.org/vuls/id/696896"
          },
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556"
          },
          {
            "name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801",
            "refsource": "MISC",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2006-4333"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-399"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.wireshark.org/security/wnpa-sec-2006-02.html",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "http://www.wireshark.org/security/wnpa-sec-2006-02.html"
            },
            {
              "name": "19690",
              "refsource": "BID",
              "tags": [
                "Patch"
              ],
              "url": "http://www.securityfocus.com/bid/19690"
            },
            {
              "name": "1016736",
              "refsource": "SECTRACK",
              "tags": [
                "Patch"
              ],
              "url": "http://securitytracker.com/id?1016736"
            },
            {
              "name": "21597",
              "refsource": "SECUNIA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/21597"
            },
            {
              "name": "21649",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21649"
            },
            {
              "name": "GLSA-200608-26",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200608-26.xml"
            },
            {
              "name": "DSA-1171",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2006/dsa-1171"
            },
            {
              "name": "21813",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21813"
            },
            {
              "name": "21619",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21619"
            },
            {
              "name": "21682",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21682"
            },
            {
              "name": "RHSA-2006:0658",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0658.html"
            },
            {
              "name": "21885",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21885"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm"
            },
            {
              "name": "22378",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/22378"
            },
            {
              "name": "VU#696896",
              "refsource": "CERT-VN",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/696896"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-597",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.rpath.com/browse/RPL-597"
            },
            {
              "name": "MDKSA-2006:152",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:152"
            },
            {
              "name": "ADV-2006-3370",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/3370"
            },
            {
              "name": "wireshark-sscop-dos(28556)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28556"
            },
            {
              "name": "wireshark-esp-offbyone(28553)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28553"
            },
            {
              "name": "oval:org.mitre.oval:def:11801",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801"
            },
            {
              "name": "20060825 rPSA-2006-0158-1 tshark wireshark",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/444323/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 5.4,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 4.9,
          "impactScore": 6.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-17T21:34Z",
      "publishedDate": "2006-08-24T20:04Z"
    }
  }
}

RHSA-2006:0658

Vulnerability from csaf_redhat - Published: 2006-09-12 15:38 - Updated: 2026-06-25 10:33

Summary

Red Hat Security Advisory: wireshark security update

Severity

Low

Scope

3 vulnerabilities in this advisory, including CVE-2006-4333.

CVE-2006-4333

Fixed: 92 products

https://access.redhat.com/errata/RHSA-2006:0658

Open the full advisory

RHSA-2006_0658

Vulnerability from csaf_redhat - Published: 2006-09-12 15:38 - Updated: 2024-11-22 00:28

Summary

Red Hat Security Advisory: wireshark security update

Severity

Low

Scope

3 vulnerabilities in this advisory, including CVE-2006-4333.

CVE-2006-4333

Fixed: 152 products

https://access.redhat.com/errata/RHSA-2006:0658

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2006-4333 (GCVE-0-2006-4333)

CERTA-2006-AVI-373

Description

Solution

CERTA-2006-AVI-373

Description

Solution

FKIE_CVE-2006-4333

GHSA-JHFX-PFVP-J6F3

GSD-2006-4333

RHSA-2006:0658

RHSA-2006_0658

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour