CVE-2005-0705: The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled

Unscored severity · published May 2, 2005

CVE-2005-0705

The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled

–

CVSS

1.9%

EPSS

On KEV

Description

The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote attackers to cause a denial of service (application crash).

Exploitation

Is it being used?

Exploit prediction (EPSS)1.9% · higher than 80% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Ethereal · Ethereal Group

0.10.7; 0.10.8; 0.10.9 · source: NVD

Affected product

Ethereal

Ethereal Group

All Ethereal CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2005-0705

CVE.org

https://www.cve.org/CVERecord?id=CVE-2005-0705

Vendor Advisory

http://www.ethereal.com/appnotes/enpa-sa-00018.html

Patch

http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml

www.mandriva.com

http://www.mandriva.com/security/advisories?name=MDKSA-2005:053

www.redhat.com

http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html

www.redhat.com

http://www.redhat.com/support/errata/RHSA-2005-306.html

www.securityfocus.com

http://www.securityfocus.com/bid/12762