CVE-2006-3631: Medium severity Wireshark Wireshark vulnerability
Published Jul 18, 2006
·Updated
Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.
Affected Software
10 affected components
Wireshark Wireshark=0.9.10
Wireshark Wireshark=0.9.2
Wireshark Wireshark=0.9.14
Wireshark Wireshark=0.99.0
Wireshark Wireshark=0.9.8
Wireshark Wireshark=0.9.5
Wireshark Wireshark=0.9.6
Wireshark Wireshark=0.99
Wireshark Wireshark=0.9.15
Wireshark Wireshark=0.9.7
Remediation
Patch Available
Event History
Jul 18, 2006
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3631?
CVE-2006-3631 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2006-3631?
To fix CVE-2006-3631, upgrade Wireshark to a version newer than 0.99.0 or apply the available patches.
3
Which versions of Wireshark are affected by CVE-2006-3631?
CVE-2006-3631 affects Wireshark versions from 0.9.10 to 0.99.0.
4
What type of attack can exploit CVE-2006-3631?
CVE-2006-3631 can be exploited by remote attackers to cause an infinite loop, resulting in denial of service.
5
Is there a workaround for CVE-2006-3631?
Currently, the best approach is to upgrade to a non-vulnerable version of Wireshark.