CVE-2006-3630
Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and...
CVE-2006-3630 is a high vulnerability (CVSS 7.5) in Wireshark, published July 18, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.94%, the 80th percentile. Fixed in wireshark 0.99.2-1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.94%EPSS, 80th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.99.2-1wireshark +27 more
Description
Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 | before 0.99.2-1 | 0.99.2-1 |
wiresharkDebian:13 | before 0.99.2-1 | 0.99.2-1 |
wiresharkDebian:14 | before 0.99.2-1 | 0.99.2-1 |
etherealDebian:3.1 From an advisory covering 5 CVEs | before 0.10.10-2sarge6, plus listed versions 0.10.10-2sarge20.10.10-2sarge30.10.10-2sarge40.10.10-2sarge5 | 0.10.10-2sarge6 |
wiresharkRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wiresharkRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wiresharkRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:0.99.2-EL3.1 | 0:0.99.2-EL3.1 |
wiresharkRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wiresharkRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wiresharkRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wiresharkRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:0.99.2-EL4.1 | 0:0.99.2-EL4.1 |
What each source reports
NVD Score used
Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.
- Record
CVE-2006-3630- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE ListNo score
Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.
- Record
CVE-2006-3630- Updated
- 2026-11-02
EUVDEUVD-2006-3625No score
Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.
- Record
EUVD-2006-3625- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xhvg-9hv8-ff9rNo score
Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and...
Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.
- Record
GHSA-xhvg-9hv8-ff9r- Updated
- 2026-11-02
OSVNo score
Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.
- Record
CVE-2006-3630- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-3630No score
Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.
- Record
DEBIAN-CVE-2006-3630- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
rhn.redhat.com/errata/RHSA-2006-0602.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11350
novell.com/linux/security/advisories/2006_20_sr.html
secunia.com/advisories/21121
securitytracker.com/id?1016532
Show 52 moreShow less
osvdb.org/27368
security.gentoo.org/glsa/glsa-200607-09.xml
support.avaya.com/elmodocs2/security/ASA-2006-197.htm
securityfocus.com/archive/1/440576/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/27827
vupen.com/english/advisories/2006/2850
wireshark.org/security/wnpa-sec-2006-01.html
debian.org/security/2006/dsa-1127
mandriva.com/security/advisories?name=MDKSA-2006:128
issues.rpath.com/browse/RPL-512
nvd.nist.gov/vuln/detail/CVE-2006-3630
github.com/advisories/GHSA-xhvg-9hv8-ff9r
security-tracker.debian.org/tracker/CVE-2006-3630
access.redhat.com/errata/RHSA-2006:0602
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=199231
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0602.json
cve.org/CVERecord?id=CVE-2006-3627