Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2006-4333

17
FAUCET Score

CVE-2006-4333 describes a denial-of-service vulnerability in Wireshark (formerly Ethereal) versions prior to 0.99.3. Malformed SSCOP packets can cause the Q.2391 dissector to consume excessive memory, leading to a system crash. This vulnerability has a CVSS score of 5.4, indicating a medium severity, and can be exploited remotely with high attack complexity, resulting in a complete loss of availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
0.10.4CPE matchmatch criteria
cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*
0.10.13CPE matchmatch criteria
cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*
0.99CPE matchmatch criteria
cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*
0.99.1CPE matchmatch criteria
cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*
0.99.2CPE matchmatch criteria
cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.4MEDIUM

AV:N/AC:H/Au:N/C:N/I:N/A:C

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Exploitability Score
4.9
Impact Score
6.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
3.94%
Probability of exploitation in next 30 days
EPSS Percentile
89.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0394 is in the 85th percentile among its peer group of 19,958 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: wireshark-0:0.99.3-EL3.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: wireshark-0:0.99.3-EL4.2
View patch

Vendor Advisories (1)

redhatCVE-2006-4333Low

security flaw

Aug 23, 2006

References

secunia.com / advisories/21597
PatchVendor Advisory
secunia.com / advisories/21619
secunia.com / advisories/21649
secunia.com / advisories/21682
secunia.com / advisories/21813
secunia.com / advisories/21885
secunia.com / advisories/22378
security.gentoo.org / glsa/glsa-200608-26.xml
securitytracker.com / id
Patch
exchange.xforce.ibmcloud.com / vulnerabilities/28553
exchange.xforce.ibmcloud.com / vulnerabilities/28556
issues.rpath.com / browse/RPL-597
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11801
support.avaya.com / elmodocs2/security/ASA-2006-227.htm
debian.org / security/2006/dsa-1171
kb.cert.org / vuls/id/696896
US Government Resource
mandriva.com / security/advisories
redhat.com / support/errata/RHSA-2006-0658.html
securityfocus.com / archive/1/444323/100/0/threaded
securityfocus.com / bid/19690
Patch
vupen.com / english/advisories/2006/3370
wireshark.org / security/wnpa-sec-2006-02.html
Patch