CVE-2006-4805: Medium severity Wireshark Wireshark vulnerability

Published Oct 27, 2006

Updated

epan/dissectors/packet-xot.c in the XOT dissector (dissectxotpdu) in Wireshark (formerly Ethereal) 0.9.8 through 0.99.3 allows remote attackers to cause a denial of service (memory consumption and crash) via an encoded XOT packet that produces a zero length value when it is decoded.

Affected Software

9 affected components

Wireshark Wireshark=0.9.10

Wireshark Wireshark=0.99.3

Wireshark Wireshark=0.10.4

Wireshark Wireshark=0.10

Wireshark Wireshark=0.9.8

Wireshark Wireshark=0.99.2

Wireshark Wireshark=0.99.1

Wireshark Wireshark=0.10.13

Wireshark Wireshark=0.99

Event History

Oct 27, 2006

CVE Published

11:07 PM

Data Sourced

via NVD·11:07 PM

DescriptionSeverityAffected Software

Oct 28, 2006

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-4805?

CVE-2006-4805 has a severity level categorized as a denial of service vulnerability.

How do I fix CVE-2006-4805?

To fix CVE-2006-4805, update to a version of Wireshark that is not vulnerable, specifically versions later than 0.99.3.

Which versions of Wireshark are affected by CVE-2006-4805?

CVE-2006-4805 affects Wireshark versions from 0.9.8 to 0.99.3.

What is the impact of CVE-2006-4805?

The impact of CVE-2006-4805 is the potential for memory consumption and crashes of the Wireshark application.

Can CVE-2006-4805 be exploited remotely?

Yes, CVE-2006-4805 can be exploited remotely by attackers through specially encoded XOT packets.