PT-2006-4504 · Wireshark+1 · Wireshark+1

Published 2006-07-18 · Updated 2018-10-18 · CVE-2006-3631

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.9.10 through 0.99.0

Description The issue is related to an unspecified vulnerability in the SSH dissector, allowing remote attackers to cause a denial of service through an infinite loop. The attack vectors for this issue are unknown.

Recommendations For Wireshark versions 0.9.10 through 0.99.0, update to a version that contains a fix for this issue to prevent potential denial of service attacks.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2006-3631

DSA-1127

RHSA-2006:0602

RHSA-2006_0602

Affected Products

Red Hat

Wireshark

References · 35

• http://wireshark.org/security/wnpa-sec-2006-01.html · Vendor Advisory
• http://secunia.com/advisories/21488 · Vendor Advisory
• http://secunia.com/advisories/21121 · Vendor Advisory
• http://secunia.com/advisories/21598 · Vendor Advisory
• http://vupen.com/english/advisories/2006/2850 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200607-09.xml · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:128 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-3631 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-3631 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P · Vendor Advisory
• http://secunia.com/advisories/21078 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-3631 · Vendor Advisory
• http://debian.org/security/2006/dsa-1127 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2006-0602.html · Vendor Advisory
• http://secunia.com/advisories/21204 · Vendor Advisory