Description
Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP dissector, (6) DCERPC, (7) DHCP, (8) RADIUS dissector, (9) Telnet dissector, (10) IS-IS LSP dissector, or (11) NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial of service (application crash or abort) via unknown attack vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | ethereal +1 | 0.10.12-1.EL3.1 | RHSA-2005:687 |
Advisories 2
- RHSA-2005:687 Red Hat Security Advisory: ethereal security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-853-1 ethereal - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- http://www.ethereal.com/appnotes/enpa-sa-00020.html
- GLSA-200507-27 vendor-advisory
- SUSE-SR:2005:019 vendor-advisory
- oval:org.mitre.oval:def:10225 vdb-entry signature
- RHSA-2005:687 vendor-advisory
- DSA-853 vendor-advisory
- 16225 third-party-advisory
- FLSA-2006:152922 vendor-advisory
- 14399 vdb-entry
- 17102 third-party-advisory