Description
Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) multiple vectors in H.248, and the (2) X.509if, (3) SRVLOC, (4) H.245, (5) AIM, and (6) general packet dissectors; and (7) the statistics counter.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | ethereal | 0.10.10-2sarge5 | DSA-1049-1 |
| Debian 3.0 | ethereal | 0.9.4-1woody15 | DSA-1049-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | ethereal +1 | 0.99.0-EL3.2 | RHSA-2006:0420 |
Advisories 2
- RHSA-2006:0420 Red Hat Security Advisory: ethereal security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1049-1 ethereal - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- ethereal-general-dissector-dos(26018) vdb-entry
- 19828 third-party-advisory
- 19839 third-party-advisory
- ethereal-aim-dos(26019) vdb-entry
- 20210 third-party-advisory
- FEDORA-2006-456 vendor-advisory
- MDKSA-2006:077 vendor-advisory
- http://www.ethereal.com/appnotes/enpa-sa-00023.html
- ethereal-h248-dos(26031) vdb-entry
- 19769 third-party-advisory
- 19962 third-party-advisory
- ethereal-srvloc-dos(26010) vdb-entry
- FEDORA-2006-461 vendor-advisory
- 1015985 vdb-entry
- ethereal-x509if-dissector-dos(26009) vdb-entry
- GLSA-200604-17 vendor-advisory
- oval:org.mitre.oval:def:10323 vdb-entry signature
- ethereal-h245-dos(26011) vdb-entry
- ADV-2006-1501 vdb-entry
- DSA-1049 vendor-advisory
- 19805 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm
- ethereal-h248-dissector-dos(26007) vdb-entry
- ethereal-statistics-counter-dos(26015) vdb-entry
- SUSE-SR:2006:010 vendor-advisory
- 20117 third-party-advisory
- 17682 vdb-entry
- 20944 third-party-advisory
- RHSA-2006:0420 vendor-advisory
- 19958 third-party-advisory