Denial of Service Vulnerability in Ethereal by Ethereal Technologies
CVE-2005-3244

Currently unrated

Key Information:

Vendor: Ethereal Group
Status: Ethereal
Vendor: CVE Published:; 27 October 2005

🔔 Create Ethereal Group Vulnerability Alert

What is CVE-2005-3244?

The BER dissector in Ethereal version 0.10.3 through 0.10.12 has a vulnerability that allows remote attackers to exploit an infinite loop condition, leading to denial of service. This issue arises from unspecified vectors that, when triggered, cause the affected Ethereal versions to enter an unending cycle, overwhelming system resources and preventing legitimate operations.

References

http://www.redhat.com/support/errata/RHSA-2005-809.html

vendor-advisoryx_refsource_REDHAT

http://secunia.com/advisories/17327

third-party-advisoryx_refsource_SECUNIA

http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml

vendor-advisoryx_refsource_GENTOO

EPSS Score

7% chance of being exploited in the next 30 days.

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 27, 2005
Vulnerability Reserved
Oct 17, 2005