Skip to content

CVE-2006-4331

Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0...

5.0 MediumFix available

CVE-2006-4331 is a medium vulnerability (CVSS 5.0) in Wireshark, published August 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.47%, the 91st percentile. Fixed in wireshark 0.99.2-5.1.

Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.

Exploit likelihood

4.47%Up 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.

Record: CVE-2006-4331
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.

Record: CVE-2006-4331
Updated: 2026-11-02

EUVDEUVD-2006-4319 No score

Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.

Record: EUVD-2006-4319
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8g49-gwpq-xm8f No score

Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0...

Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.

Record: GHSA-8g49-gwpq-xm8f
Updated: 2026-11-02

OSV No score

Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.

Record: CVE-2006-4331
Updated: 2026-11-02

OSVDEBIAN-CVE-2006-4331 No score

Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.

Record: DEBIAN-CVE-2006-4331
Updated: 2026-11-02

Affected products

wireshark

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Debian:12	before 0.99.2-5.1	0.99.2-5.1
`wireshark` Debian:13	before 0.99.2-5.1	0.99.2-5.1
`wireshark` Debian:14	before 0.99.2-5.1	0.99.2-5.1
`wireshark` Red Hat:enterprise_linux:3::as	before 0:0.99.3-EL3.2	0:0.99.3-EL3.2
`wireshark-debuginfo` Red Hat:enterprise_linux:3::as	before 0:0.99.3-EL3.2	0:0.99.3-EL3.2
`wireshark-gnome` Red Hat:enterprise_linux:3::as	before 0:0.99.3-EL3.2	0:0.99.3-EL3.2
`wireshark` Red Hat:enterprise_linux:3::desktop	before 0:0.99.3-EL3.2	0:0.99.3-EL3.2
`wireshark-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:0.99.3-EL3.2	0:0.99.3-EL3.2
`wireshark-gnome` Red Hat:enterprise_linux:3::desktop	before 0:0.99.3-EL3.2	0:0.99.3-EL3.2
`wireshark` Red Hat:enterprise_linux:3::es	before 0:0.99.3-EL3.2	0:0.99.3-EL3.2

Show 17 moreShow less

Affected packages
Package	Affected	Fixed
`wireshark-debuginfo` Red Hat:enterprise_linux:3::es	before 0:0.99.3-EL3.2	0:0.99.3-EL3.2
`wireshark-gnome` Red Hat:enterprise_linux:3::es	before 0:0.99.3-EL3.2	0:0.99.3-EL3.2
`wireshark` Red Hat:enterprise_linux:3::ws	before 0:0.99.3-EL3.2	0:0.99.3-EL3.2
`wireshark-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:0.99.3-EL3.2	0:0.99.3-EL3.2
`wireshark-gnome` Red Hat:enterprise_linux:3::ws	before 0:0.99.3-EL3.2	0:0.99.3-EL3.2
`wireshark` Red Hat:enterprise_linux:4::as	before 0:0.99.3-EL4.2	0:0.99.3-EL4.2
`wireshark-debuginfo` Red Hat:enterprise_linux:4::as	before 0:0.99.3-EL4.2	0:0.99.3-EL4.2
`wireshark-gnome` Red Hat:enterprise_linux:4::as	before 0:0.99.3-EL4.2	0:0.99.3-EL4.2
`wireshark` Red Hat:enterprise_linux:4::desktop	before 0:0.99.3-EL4.2	0:0.99.3-EL4.2
`wireshark-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:0.99.3-EL4.2	0:0.99.3-EL4.2
`wireshark-gnome` Red Hat:enterprise_linux:4::desktop	before 0:0.99.3-EL4.2	0:0.99.3-EL4.2
`wireshark` Red Hat:enterprise_linux:4::es	before 0:0.99.3-EL4.2	0:0.99.3-EL4.2
`wireshark-debuginfo` Red Hat:enterprise_linux:4::es	before 0:0.99.3-EL4.2	0:0.99.3-EL4.2
`wireshark-gnome` Red Hat:enterprise_linux:4::es	before 0:0.99.3-EL4.2	0:0.99.3-EL4.2
`wireshark` Red Hat:enterprise_linux:4::ws	before 0:0.99.3-EL4.2	0:0.99.3-EL4.2
`wireshark-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:0.99.3-EL4.2	0:0.99.3-EL4.2
`wireshark-gnome` Red Hat:enterprise_linux:4::ws	before 0:0.99.3-EL4.2	0:0.99.3-EL4.2

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 32 moreShow less