CVE-2006-3632
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a...
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.
Exploit likelihood
What each source reports
NVD Score used
10.0
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.
- Record
CVE-2006-3632- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.
- Record
CVE-2006-3632- Updated
- 2026-11-02
EUVDEUVD-2006-3627 No score
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.
- Record
EUVD-2006-3627- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j662-g76p-xchg No score
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a...
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.
- Record
GHSA-j662-g76p-xchg- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.
- Record
CVE-2006-3632- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-3632 No score
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.
- Record
DEBIAN-CVE-2006-3632- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 0.99.2-1 | 0.99.2-1 |
wiresharkDebian:13 |
before 0.99.2-1 | 0.99.2-1 |
wiresharkDebian:14 |
before 0.99.2-1 | 0.99.2-1 |
etherealDebian:3.1 From an advisory covering 5 CVEs |
before 0.10.10-2sarge6, plus listed versions 0.10.10-2sarge20.10.10-2sarge30.10.10-2sarge40.10.10-2sarge5 |
0.10.10-2sarge6 |
wiresharkRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wiresharkRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wiresharkRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wiresharkRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wiresharkRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wiresharkRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wiresharkRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3632 is a high vulnerability (CVSS 10.0) in Ethereal Group Ethereal, published July 18, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.47%, the 94th percentile. Fixed in wireshark 0.99.2-1.
References
rhn.redhat.com/errata/RHSA-2006-0602.html
novell.com/linux/security/advisories/2006_20_sr.html
osvdb.org/27371
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9468
exchange.xforce.ibmcloud.com/vulnerabilities/27830
secunia.com/advisories/21121
Show 50 moreShow less
securitytracker.com/id?1016532
secunia.com/advisories/21078
security.gentoo.org/glsa/glsa-200607-09.xml
support.avaya.com/elmodocs2/security/ASA-2006-197.htm
secunia.com/advisories/21598
secunia.com/advisories/21467
secunia.com/advisories/22089
secunia.com/advisories/21204
securityfocus.com/archive/1/440576/100/0/threaded
vupen.com/english/advisories/2006/2850
wireshark.org/security/wnpa-sec-2006-01.html
debian.org/security/2006/dsa-1127
secunia.com/advisories/21107
secunia.com/advisories/21249
mandriva.com/security/advisories?name=MDKSA-2006:128
secunia.com/advisories/21488
issues.rpath.com/browse/RPL-512
securityfocus.com/bid/19051
nvd.nist.gov/vuln/detail/CVE-2006-3632
github.com/advisories/GHSA-j662-g76p-xchg
security-tracker.debian.org/tracker/CVE-2006-3632
access.redhat.com/errata/RHSA-2006:0602
wireshark.org/faq.html
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=199231
bugzilla.redhat.com/show_bug.cgi?id=199232
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0602.json
access.redhat.com/security/cve/CVE-2006-3627
bugzilla.redhat.com/show_bug.cgi?id=1618146
cve.org/CVERecord?id=CVE-2006-3627
nvd.nist.gov/vuln/detail/CVE-2006-3627
access.redhat.com/security/cve/CVE-2006-3628
bugzilla.redhat.com/show_bug.cgi?id=1618147
cve.org/CVERecord?id=CVE-2006-3628
nvd.nist.gov/vuln/detail/CVE-2006-3628
access.redhat.com/security/cve/CVE-2006-3629
bugzilla.redhat.com/show_bug.cgi?id=1618148
cve.org/CVERecord?id=CVE-2006-3629
nvd.nist.gov/vuln/detail/CVE-2006-3629
access.redhat.com/security/cve/CVE-2006-3630
bugzilla.redhat.com/show_bug.cgi?id=1618149
cve.org/CVERecord?id=CVE-2006-3630
nvd.nist.gov/vuln/detail/CVE-2006-3630
access.redhat.com/security/cve/CVE-2006-3631
bugzilla.redhat.com/show_bug.cgi?id=1618150
cve.org/CVERecord?id=CVE-2006-3631
nvd.nist.gov/vuln/detail/CVE-2006-3631
access.redhat.com/security/cve/CVE-2006-3632
bugzilla.redhat.com/show_bug.cgi?id=1618151
cve.org/CVERecord?id=CVE-2006-3632