Description
Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error related to unexpected length values.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | wireshark | 0.99.4-1 | — |
| Debian 13 | wireshark | 0.99.4-1 | — |
| Debian 12 | wireshark | 0.99.4-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | wireshark +1 | 0.99.4-EL4.1 | RHSA-2006:0726 |
| RHEL 3 | wireshark +1 | 0.99.4-EL3.1 | RHSA-2006:0726 |
| RHEL 2 | wireshark +1 | 0.99.4-AS21.1 | RHSA-2006:0726 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | wireshark | 3.4.8-1.2 | openSUSE-SU-2024:11513-1 |
Advisories 2
- RHSA-2006:0726 Red Hat Security Advisory: wireshark security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:11513-1 libwireshark14-3.4.8-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- wireshark-mime-dos(29844) vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm
- oval:org.mitre.oval:def:9740 vdb-entry signature
- 23096 third-party-advisory
- http://www.wireshark.org/security/wnpa-sec-2006-03.html
- DSA-1201 vendor-advisory
- https://issues.rpath.com/browse/RPL-746
- 22590 third-party-advisory
- ADV-2006-4220 vdb-entry
- 22841 third-party-advisory
- 20762 vdb-entry
- SUSE-SA:2006:065 vendor-advisory
- RHSA-2006:0726 vendor-advisory
- 22929 third-party-advisory
- 20061101 rPSA-2006-0202-1 tshark wireshark mailing-list
- 22659 third-party-advisory
- 22692 third-party-advisory
- MDKSA-2006:195 vendor-advisory
- 1017129 vdb-entry
- 22672 third-party-advisory
- 22797 third-party-advisory