Vulnerability in Wireshark

CVE-2006-4805

epan/dissectors/packet-xot.c in the XOT dissector (dissect_xot_pdu) in Wireshark (formerly Ethereal) 0.9.8 through 0.99.3 allows remote attackers to cause a denial of service (memory consumption and crash) via an encoded XOT packet that produces a zero length value when it is decoded.

EPSS: 0.042 (89.8th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 0.9.8, 0.9.10, 0.10
  • N/a — versions n/a

References