PT-2006-5361 · Wireshark+1 · Wireshark+1

Publicado 2006-10-27 · Atualizado 2025-01-17 · CVE-2006-4574

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.10.1 through 0.99.3

Description The issue is related to an off-by-one error in the MIME Multipart dissector, which allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error related to unexpected length values.

Recommendations For Wireshark versions 0.10.1 through 0.99.3, consider updating to a version that fixes the off-by-one error in the MIME Multipart dissector to prevent denial of service attacks. As a temporary workaround, consider disabling the MIME Multipart dissector until a patch is available.

Correção

DoS

Assertion Failure

Enumeração de Fraquezas

CWE-193

CWE-617

Identificadores relacionados

CVE-2006-4574

OPENSUSE-SU-2024:11513-1

RHSA-2006:0726

RHSA-2006_0726

Produtos afetados

Red Hat

Wireshark

Referências · 198

• https://suse.com/security/cve/CVE-2017-9353 · Nota
• http://secunia.com/advisories/22929 · Nota
• https://suse.com/security/cve/CVE-2018-7337 · Nota
• https://suse.com/security/cve/CVE-2017-17085 · Nota
• https://suse.com/security/cve/CVE-2018-9263 · Nota
• https://suse.com/security/cve/CVE-2006-5740 · Nota
• https://suse.com/security/cve/CVE-2021-22173 · Nota
• http://vupen.com/english/advisories/2006/4220 · Nota
• https://suse.com/security/cve/CVE-2020-26420 · Nota
• https://suse.com/security/cve/CVE-2017-9344 · Nota
• https://suse.com/security/cve/CVE-2019-9214 · Nota
• https://suse.com/security/cve/CVE-2017-7745 · Nota
• http://securityfocus.com/bid/20762 · Nota
• http://securitytracker.com/id?1017129 · Nota
• https://suse.com/security/cve/CVE-2019-10901 · Nota