Description
Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) an invalid display filter, or the (2) GSM SMS, (3) ASN.1-based, (4) DCERPC NT, (5) PER, (6) RPC, (7) DCERPC, and (8) ASN.1 dissectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | ethereal | 0.10.10-2sarge5 | DSA-1049-1 |
| Debian 3.0 | ethereal | 0.9.4-1woody15 | DSA-1049-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | ethereal +1 | 0.99.0-EL3.2 | RHSA-2006:0420 |
Advisories 2
- RHSA-2006:0420 Red Hat Security Advisory: ethereal security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1049-1 ethereal - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 19828 third-party-advisory
- 19839 third-party-advisory
- ethereal-asn1based-dissector-dos(26030) vdb-entry
- 20210 third-party-advisory
- FEDORA-2006-456 vendor-advisory
- ethereal-dcerpc-dissector-dos(26021) vdb-entry
- MDKSA-2006:077 vendor-advisory
- http://www.ethereal.com/appnotes/enpa-sa-00023.html
- ethereal-display-filter-dos(26017) vdb-entry
- 19769 third-party-advisory
- 19962 third-party-advisory
- FEDORA-2006-461 vendor-advisory
- ethereal-per-diss-dos(26033) vdb-entry
- 1015985 vdb-entry
- ethereal-rpc-dos(26020) vdb-entry
- ethereal-gsmsms-dissector-dos(26028) vdb-entry
- GLSA-200604-17 vendor-advisory
- ADV-2006-1501 vdb-entry
- DSA-1049 vendor-advisory
- 19805 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm
- SUSE-SR:2006:010 vendor-advisory
- 20117 third-party-advisory
- 17682 vdb-entry
- 20944 third-party-advisory
- ethereal-dcerpcnt-dissector-dos(26032) vdb-entry
- oval:org.mitre.oval:def:11030 vdb-entry signature
- ethereal-asn1-dissector-dos(26022) vdb-entry
- RHSA-2006:0420 vendor-advisory
- 19958 third-party-advisory