DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet that ca

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• ethereal group ethereal0.9_.0
• ethereal group ethereal0.9.1
• ethereal group ethereal0.9.2
• ethereal group ethereal0.9.3

Other highest-scoring records for the same primary product.

• CVE-2006-3632Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbit
  42Plan
• CVE-2005-3184Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvloc.c) in Ethereal allo
  42Plan
• CVE-2004-0507Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execut
  42Plan
• CVE-2006-1932Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors.
  41Plan
• CVE-2003-0431The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences.
  41Plan
• CVE-2003-0432Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.1
  41Plan

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.