CVE-2006-4333
The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to...
The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.
Exploit likelihood
What each source reports
NVD Score used
5.4
The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.
- Record
CVE-2006-4333- CVSS 2.0
- 5.4 Medium
AV:N/AC:H/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.
- Record
CVE-2006-4333- Updated
- 2026-11-02
EUVDEUVD-2006-4321 No score
The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.
- Record
EUVD-2006-4321- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jhfx-pfvp-j6f3 No score
The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to...
The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.
- Record
GHSA-jhfx-pfvp-j6f3- Updated
- 2026-11-02
OSV No score
The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.
- Record
CVE-2006-4333- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4333 No score
The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.
- Record
DEBIAN-CVE-2006-4333- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 0.99.2-5.1 | 0.99.2-5.1 |
wiresharkDebian:13 |
before 0.99.2-5.1 | 0.99.2-5.1 |
wiresharkDebian:14 |
before 0.99.2-5.1 | 0.99.2-5.1 |
etherealDebian:3.1 From an advisory covering 8 CVEs |
before 0.10.10-2sarge8, plus listed versions 0.10.10-2sarge20.10.10-2sarge30.10.10-2sarge40.10.10-2sarge50.10.10-2sarge6 |
0.10.10-2sarge8 |
wiresharkRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:0.99.3-EL3.2 | 0:0.99.3-EL3.2 |
wireshark-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:0.99.3-EL3.2 | 0:0.99.3-EL3.2 |
wireshark-gnomeRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:0.99.3-EL3.2 | 0:0.99.3-EL3.2 |
wiresharkRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:0.99.3-EL3.2 | 0:0.99.3-EL3.2 |
wireshark-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:0.99.3-EL3.2 | 0:0.99.3-EL3.2 |
wireshark-gnomeRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:0.99.3-EL3.2 | 0:0.99.3-EL3.2 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:0.99.3-EL3.2 | 0:0.99.3-EL3.2 |
wireshark-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:0.99.3-EL3.2 | 0:0.99.3-EL3.2 |
wireshark-gnomeRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:0.99.3-EL3.2 | 0:0.99.3-EL3.2 |
wiresharkRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:0.99.3-EL3.2 | 0:0.99.3-EL3.2 |
wireshark-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:0.99.3-EL3.2 | 0:0.99.3-EL3.2 |
wireshark-gnomeRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:0.99.3-EL3.2 | 0:0.99.3-EL3.2 |
wiresharkRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:0.99.3-EL4.2 | 0:0.99.3-EL4.2 |
wireshark-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:0.99.3-EL4.2 | 0:0.99.3-EL4.2 |
wireshark-gnomeRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:0.99.3-EL4.2 | 0:0.99.3-EL4.2 |
wiresharkRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:0.99.3-EL4.2 | 0:0.99.3-EL4.2 |
wireshark-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:0.99.3-EL4.2 | 0:0.99.3-EL4.2 |
wireshark-gnomeRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:0.99.3-EL4.2 | 0:0.99.3-EL4.2 |
wiresharkRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:0.99.3-EL4.2 | 0:0.99.3-EL4.2 |
wireshark-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:0.99.3-EL4.2 | 0:0.99.3-EL4.2 |
wireshark-gnomeRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:0.99.3-EL4.2 | 0:0.99.3-EL4.2 |
wiresharkRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:0.99.3-EL4.2 | 0:0.99.3-EL4.2 |
wireshark-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:0.99.3-EL4.2 | 0:0.99.3-EL4.2 |
wireshark-gnomeRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:0.99.3-EL4.2 | 0:0.99.3-EL4.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4333 is a medium vulnerability (CVSS 5.4) in Wireshark, published August 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.01%, the 90th percentile. Fixed in wireshark 0.99.2-5.1.
References
vupen.com/english/advisories/2006/3370
issues.rpath.com/browse/RPL-597
support.avaya.com/elmodocs2/security/ASA-2006-227.htm
secunia.com/advisories/21682
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801
securityfocus.com/bid/19690
Show 36 moreShow less
securitytracker.com/id?1016736
redhat.com/support/errata/RHSA-2006-0658.html
secunia.com/advisories/21649
mandriva.com/security/advisories?name=MDKSA-2006:152
exchange.xforce.ibmcloud.com/vulnerabilities/28556
debian.org/security/2006/dsa-1171
secunia.com/advisories/21813
wireshark.org/security/wnpa-sec-2006-02.html
kb.cert.org/vuls/id/696896
secunia.com/advisories/21619
security.gentoo.org/glsa/glsa-200608-26.xml
exchange.xforce.ibmcloud.com/vulnerabilities/28553
secunia.com/advisories/21885
secunia.com/advisories/21597
securityfocus.com/archive/1/444323/100/0/threaded
secunia.com/advisories/22378
nvd.nist.gov/vuln/detail/CVE-2006-4333
github.com/advisories/GHSA-jhfx-pfvp-j6f3
security-tracker.debian.org/tracker/CVE-2006-4333
access.redhat.com/errata/RHSA-2006:0658
access.redhat.com/security/updates/classification
wireshark.org/faq.html
bugzilla.redhat.com/show_bug.cgi?id=204045
bugzilla.redhat.com/show_bug.cgi?id=204066
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0658.json
access.redhat.com/security/cve/CVE-2006-4330
bugzilla.redhat.com/show_bug.cgi?id=1618178
cve.org/CVERecord?id=CVE-2006-4330
nvd.nist.gov/vuln/detail/CVE-2006-4330
access.redhat.com/security/cve/CVE-2006-4331
bugzilla.redhat.com/show_bug.cgi?id=1618179
cve.org/CVERecord?id=CVE-2006-4331
nvd.nist.gov/vuln/detail/CVE-2006-4331
access.redhat.com/security/cve/CVE-2006-4333
bugzilla.redhat.com/show_bug.cgi?id=1618180
cve.org/CVERecord?id=CVE-2006-4333