Ethereal Group vulnerabilities, page 4

104 vulnerabilities

Known vulnerabilities in Ethereal Group products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

5CVE-2005-3242ethereal_groupethereal
EPSS score
2.70%
Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) the IrDA dissector and (2) the SMB dissector when SMB transaction payload reassembly is enabled.
5CVE-2005-3246ethereal_groupethereal
EPSS score
2.70%
Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (null dereference) via unknown vectors in the (1) SCSI, (2) sFlow, or (3) RTnet dissectors.
6.4CVE-2005-3249ethereal_groupethereal
EPSS score
2.69%
Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer.
5CVE-2005-3245ethereal_groupethereal
EPSS score
2.70%
Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service (memory consumption).
5CVE-2005-3313ethereal_groupethereal
EPSS score
3.96%
The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite loop).
7.5CVE-2000-1174ethereal_groupethereal
EPSS score
5.82%
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.
5CVE-2000-0333ethereal_groupethereal+1
EPSS score
7.58%
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
4.3CVE-2010-1455debianwireshark+2
EPSS score
1.70%
The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.
5CVE-2004-1145altlinuxalt_linux+8
EPSS score
4.13%
Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.
5CVE-2004-1141ethereal_groupethereal
EPSS score
2.50%
The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.
5CVE-2004-1142altlinuxalt_linux+9
EPSS score
2.43%
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.
5CVE-2004-1140ethereal_groupethereal
EPSS score
2.50%
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp.
5CVE-2004-1761ethereal_groupethereal
EPSS score
2.67%
Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file.
5CVE-2004-1139altlinuxalt_linux+8
EPSS score
2.43%
Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash).
5CVE-2004-0635debianethereal+4
EPSS score
5.27%
The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.
5CVE-2004-0367ethereal_groupethereal
EPSS score
5.27%
Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.
5CVE-2004-0633ethereal_groupethereal+3
EPSS score
17.96%
The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow.
5CVE-2004-0504ethereal_groupethereal+1
EPSS score
2.71%
Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.
5CVE-2004-0506ethereal_groupethereal+1
EPSS score
3.93%
The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference.
5CVE-2004-0634ethereal_groupethereal+3
EPSS score
5.27%
The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.