PT-2006-5361 · Wireshark+1 · Wireshark+1

Published 2006-10-27 · Updated 2025-01-17 · CVE-2006-4574

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.10.1 through 0.99.3

Description The issue is related to an off-by-one error in the MIME Multipart dissector, which allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error related to unexpected length values.

Recommendations For Wireshark versions 0.10.1 through 0.99.3, consider updating to a version that fixes the off-by-one error in the MIME Multipart dissector to prevent denial of service attacks. As a temporary workaround, consider disabling the MIME Multipart dissector until a patch is available.

Fix

DoS

Assertion Failure

Weakness Enumeration

CWE-193

CWE-617

Related Identifiers

CVE-2006-4574

OPENSUSE-SU-2024:11513-1

RHSA-2006:0726

RHSA-2006_0726

Affected Products

Red Hat

Wireshark

References · 198

• http://secunia.com/advisories/22590 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0726.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-4574 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-4574 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4574 · Security Note
• http://us.debian.org/security/2006/dsa-1201 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_65_ethereal.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-4574 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:195 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11513-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2017-9353 · Note
• http://secunia.com/advisories/22929 · Note
• https://suse.com/security/cve/CVE-2018-7337 · Note
• https://suse.com/security/cve/CVE-2017-17085 · Note