| Vulnerability Name: | CVE-2006-3631 (CCN-27829) | ||||||||||||||||||||
| Assigned: | 2006-07-17 | ||||||||||||||||||||
| Published: | 2006-07-17 | ||||||||||||||||||||
| Updated: | 2018-10-18 | ||||||||||||||||||||
| Summary: | Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors. | ||||||||||||||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||||||||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P) 3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||
| Vulnerability Type: | CWE-399 | ||||||||||||||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||||||||||||||
| References: | Source: SGI Type: UNKNOWN 20060801-01-P Source: MITRE Type: CNA CVE-2006-3631 Source: CCN Type: RHSA-2006-0602 wireshark security update (was ethereal) Source: REDHAT Type: UNKNOWN RHSA-2006:0602 Source: CCN Type: SA21078 Wireshark Multiple Protocol Dissector Vulnerabilities Source: SECUNIA Type: Vendor Advisory 21078 Source: SECUNIA Type: Vendor Advisory 21107 Source: SECUNIA Type: Vendor Advisory 21121 Source: SECUNIA Type: Vendor Advisory 21204 Source: SECUNIA Type: Vendor Advisory 21249 Source: SECUNIA Type: Vendor Advisory 21467 Source: SECUNIA Type: Vendor Advisory 21488 Source: SECUNIA Type: Vendor Advisory 21598 Source: CCN Type: SA22089 Avaya Products wireshark Vulnerabilities Source: SECUNIA Type: Vendor Advisory 22089 Source: GENTOO Type: UNKNOWN GLSA-200607-09 Source: CCN Type: SECTRACK ID: 1016532 Wireshark (Ethereal) Format String Flaws, Off-by-one Errors, and Buffer Overflow May Let Remote Users Execute Arbitrary Code Source: SECTRACK Type: UNKNOWN 1016532 Source: CONFIRM Type: UNKNOWN http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm Source: CCN Type: ASA-2006-197 wireshark security update (was ethereal) (RHSA-2006-0602) Source: DEBIAN Type: UNKNOWN DSA-1127 Source: DEBIAN Type: DSA-1127 ethereal -- several vulnerabilities Source: CCN Type: GLSA-200607-09 Wireshark: Multiple vulnerabilities Source: MANDRIVA Type: UNKNOWN MDKSA-2006:128 Source: SUSE Type: UNKNOWN SUSE-SR:2006:020 Source: OSVDB Type: UNKNOWN 27370 Source: CCN Type: OSVDB ID: 27370 Wireshark SSH Dissector Infinite Loop DoS Source: BUGTRAQ Type: UNKNOWN 20060719 rPSA-2006-0132-1 tshark wireshark Source: BID Type: UNKNOWN 19051 Source: CCN Type: BID-19051 Wireshark Protocol Dissectors Multiple Vulnerabilities Source: VUPEN Type: Vendor Advisory ADV-2006-2850 Source: CCN Type: Wireshark Security Advisory wnpa-sec-2006-01 Multiple problems in Ethereal® versions 0.8.14 to 0.10.10 Source: CONFIRM Type: Patch, Vendor Advisory http://www.wireshark.org/security/wnpa-sec-2006-01.html Source: XF Type: UNKNOWN wireshark-ssh-dos(27829) Source: XF Type: UNKNOWN wireshark-ssh-dos(27829) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:11476 Source: SUSE Type: SUSE-SR:2006:020 SUSE Security Summary Report | ||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration RedHat 1: Configuration RedHat 2: Configuration RedHat 3: Configuration RedHat 4: Configuration RedHat 5:  Denotes that component is vulnerable | ||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
| BACK | |||||||||||||||||||||