Description
Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | ethereal +1 | 0.10.14-1.EL3.1 | RHSA-2006:0156 |
Advisories 2
- RHSA-2006:0156 Red Hat Security Advisory: ethereal security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-920-1 ethereal - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- SUSE-SR:2006:004 vendor-advisory
- 1015337 vdb-entry
- 18911 third-party-advisory
- 19230 third-party-advisory
- 18012 third-party-advisory
- 15794 vdb-entry
- DSA-920 vendor-advisory
- RHSA-2006:0156 vendor-advisory
- http://www.ethereal.com/appnotes/enpa-sa-00022.html
- oval:org.mitre.oval:def:11286 vdb-entry signature
- 17973 third-party-advisory
- GLSA-200512-06 vendor-advisory
- http://anonsvn.ethereal.com/viewcvs/viewcvs.py/trunk/epan/dissectors/packet-ospf.c
- MDKSA-2006:002 vendor-advisory
- 20051209 Ethereal OSPF Protocol Dissector Buffer Overflow Vulnerability third-party-advisory
- ADV-2005-2830 vdb-entry
- 18062 third-party-advisory
- MDKSA-2005:227 vendor-advisory
- 19012 third-party-advisory
- 18426 third-party-advisory
- 18331 third-party-advisory
- 247 third-party-advisory