Description
Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) Mount and (2) PPP dissectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | ethereal | 0.9.4-1woody4 | DSA-313 |
Advisories 1
- DSA-313 ethereal - buffer overflows, integer overflows Debian Security (DSA / DLA) · Mar 9, 2026
References
- VU#232164 third-party-advisory
- 7494 vdb-entry
- 7495 vdb-entry
- RHSA-2003:077 vendor-advisory
- VU#361700 third-party-advisory
- oval:org.mitre.oval:def:73 vdb-entry signature
- http://www.ethereal.com/appnotes/enpa-sa-00009.html
- DSA-313 vendor-advisory
- MDKSA-2003:067 vendor-advisory