Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2006-4574

20
FAUCET Score

CVE-2006-4574 describes an off-by-one error in the MIME Multipart dissector of Wireshark (formerly Ethereal) versions 0.10.1 through 0.99.3. This vulnerability, rated 7.5 HIGH, allows remote attackers to trigger a denial of service (crash) due to an assertion error when processing specially crafted network traffic. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 0.10.1, <= 0.99.3CPE matchmatch criteria
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
4.20%
Probability of exploitation in next 30 days
EPSS Percentile
89.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0420 is in the 82nd percentile among its peer group of 51,553 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 2.1Fixed in: wireshark-0:0.99.4-AS21.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: wireshark-0:0.99.4-EL3.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: wireshark-0:0.99.4-EL4.1
View patch

Vendor Advisories (1)

redhatCVE-2006-4574Moderate

security flaw

Oct 30, 2006

References

patches.sgi.com / support/free/security/advisories/20061101-01-P
Broken Link
secunia.com / advisories/22590
Broken LinkVendor Advisory
secunia.com / advisories/22659
Broken Link
secunia.com / advisories/22672
Broken Link
secunia.com / advisories/22692
Broken Link
secunia.com / advisories/22797
Broken Link
secunia.com / advisories/22841
Broken Link
secunia.com / advisories/22929
Broken Link
secunia.com / advisories/23096
Broken Link
securitytracker.com / id
Broken LinkThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com / vulnerabilities/29844
Third Party AdvisoryVDB Entry
issues.rpath.com / browse/RPL-746
Broken Link
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9740
Broken Link
support.avaya.com / elmodocs2/security/ASA-2006-255.htm
Third Party Advisory
mandriva.com / security/advisories
Third Party Advisory
novell.com / linux/security/advisories/2006_65_ethereal.html
Broken Link
redhat.com / support/errata/RHSA-2006-0726.html
Broken Link
securityfocus.com / archive/1/450307/100/0/threaded
Broken LinkThird Party AdvisoryVDB Entry
securityfocus.com / bid/20762
Broken LinkThird Party AdvisoryVDB Entry
us.debian.org / security/2006/dsa-1201
Broken Link
vupen.com / english/advisories/2006/4220
Broken Link
wireshark.org / security/wnpa-sec-2006-03.html
Third Party Advisory