CVE-2006-4331: Medium severity Wireshark Wireshark vulnerability
Published Aug 24, 2006
·Updated
Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.
Affected Software
1 affected component
Wireshark Wireshark=0.99.2
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Aug 24, 2006
CVE Published
08:04 PM
Aug 25, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4331?
CVE-2006-4331 has a severity level classified as medium due to its potential to cause a denial of service.
2
How do I fix CVE-2006-4331?
To fix CVE-2006-4331, upgrade to a later version of Wireshark that addresses this vulnerability.
3
What versions of Wireshark are affected by CVE-2006-4331?
CVE-2006-4331 specifically affects Wireshark version 0.99.2.
4
What type of vulnerability is CVE-2006-4331?
CVE-2006-4331 is characterized as an off-by-one error vulnerability within the IPSec ESP preference parser.
5
What can attackers do with CVE-2006-4331?
Attackers can exploit CVE-2006-4331 to crash the application, resulting in a denial of service.