CVE-2005-3651

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-10 · updated 2026-06-16

Description

Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.

Affected products

Ethereal Group Ethereal: 0.7.7, 0.8, 0.8.5, 0.8.13, 0.8.14, 0.8.15 (+33)

References

http://anonsvn.ethereal.com/viewcvs/viewcvs.py/trunk/epan/dissectors/packet-ospf.c
http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html
http://secunia.com/advisories/17973
http://secunia.com/advisories/18012
http://secunia.com/advisories/18062
http://secunia.com/advisories/18331
http://secunia.com/advisories/18426
http://secunia.com/advisories/18911
http://secunia.com/advisories/19012
http://secunia.com/advisories/19230
http://securityreason.com/securityalert/247

Get alerted when CVE-2005-3651 or the next vulnerability affects your stack