Description
Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | wireshark | 0.99.2-5.1 | — |
| Debian 13 | wireshark | 0.99.2-5.1 | — |
| Debian 12 | wireshark | 0.99.2-5.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | wireshark +1 | 0.99.3-EL4.2 | RHSA-2006:0658 |
| RHEL 3 | wireshark +1 | 0.99.3-EL3.2 | RHSA-2006:0658 |
Advisories 1
- RHSA-2006:0658 Red Hat Security Advisory: wireshark security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- ADV-2006-3370 vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2006-227.htm
- 21682 third-party-advisory
- oval:org.mitre.oval:def:14587 vdb-entry signature
- 19690 vdb-entry
- oval:org.mitre.oval:def:10125 vdb-entry signature
- 1016736 vdb-entry
- RHSA-2006:0658 vendor-advisory
- 21649 third-party-advisory
- MDKSA-2006:152 vendor-advisory
- http://www.wireshark.org/security/wnpa-sec-2006-02.html
- 21619 third-party-advisory
- GLSA-200608-26 vendor-advisory
- wireshark-esp-offbyone(28553) vdb-entry
- VU#638376 third-party-advisory
- 21885 third-party-advisory
- 21597 third-party-advisory
- 22378 third-party-advisory