CVE-2006-0048
Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation...
Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread.
Exploit likelihood
What each source reports
NVD Score used
Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread.
- Record
CVE-2006-0048- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread.
- Record
CVE-2006-0048- Updated
- 2026-11-02
EUVDEUVD-2006-0056 No score
Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread.
- Record
EUVD-2006-0056- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jmgw-fgrg-vw35 No score
Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation...
Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread.
- Record
GHSA-jmgw-fgrg-vw35- Updated
- 2026-11-02
OSV No score
Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread.
- Record
CVE-2006-0048- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-0048 No score
Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread.
- Record
DEBIAN-CVE-2006-0048- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0048 is a medium vulnerability (CVSS 5.0) in Francesco Stablum Tcpick, published April 26, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.83%, the 78th percentile. Fixed in tcpick 0.2.1-3.
References
exchange.xforce.ibmcloud.com/vulnerabilities/26090
securityfocus.com/bid/17665
vupen.com/english/advisories/2006/1466
sourceforge.net/mailarchive/forum.php?thread_id=9989610&forum_id=37151
nvd.nist.gov/vuln/detail/CVE-2006-0048
github.com/advisories/GHSA-jmgw-fgrg-vw35
security-tracker.debian.org/tracker/CVE-2006-0048