Ethereal Group vulnerabilities, page 4
104 vulnerabilities
Known vulnerabilities in Ethereal Group products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
CVE-2005-3242ethereal_groupethereal
EPSS score2.70%
Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) the IrDA dissector and (2) the SMB dissector when SMB transaction payload reassembly is enabled.CVE-2005-3246ethereal_groupetherealEPSS score2.70%
Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (null dereference) via unknown vectors in the (1) SCSI, (2) sFlow, or (3) RTnet dissectors.CVE-2005-3249ethereal_groupetherealEPSS score2.69%
Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer.CVE-2005-3245ethereal_groupetherealEPSS score2.70%
Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service (memory consumption).CVE-2005-3313ethereal_groupetherealEPSS score3.96%
The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite loop).CVE-2000-1174ethereal_groupetherealEPSS score5.82%
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.CVE-2000-0333ethereal_groupethereal+1EPSS score7.58%
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.CVE-2010-1455debianwireshark+2EPSS score1.70%
The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.CVE-2004-1145altlinuxalt_linux+8EPSS score4.13%
Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.CVE-2004-1141ethereal_groupetherealEPSS score2.50%
The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.CVE-2004-1142altlinuxalt_linux+9EPSS score2.43%
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.CVE-2004-1140ethereal_groupetherealEPSS score2.50%
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp.CVE-2004-1761ethereal_groupetherealEPSS score2.67%
Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file.CVE-2004-1139altlinuxalt_linux+8EPSS score2.43%
Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash).CVE-2004-0635debianethereal+4EPSS score5.27%
The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.CVE-2004-0367ethereal_groupetherealEPSS score5.27%
Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.CVE-2004-0633ethereal_groupethereal+3EPSS score17.96%
The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow.CVE-2004-0504ethereal_groupethereal+1EPSS score2.71%
Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.CVE-2004-0506ethereal_groupethereal+1EPSS score3.93%
The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference.CVE-2004-0634ethereal_groupethereal+3EPSS score5.27%
The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.