Description
Unspecified vulnerability in the RMI dissector in Wireshark (formerly Ethereal) 0.9.5 through 1.0.0 allows remote attackers to read system memory via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | wireshark | 1.0.1-1 | — |
| Debian 13 | wireshark | 1.0.1-1 | — |
| Debian 12 | wireshark | 1.0.1-1 | — |
| Debian 4.0 | wireshark | 0.99.4-5.etch.3 | DSA-1673-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | wireshark +1 | 1.0.3-4.el5_2 | RHSA-2008:0890 |
| RHEL 4 | wireshark +1 | 1.0.3-3.el4_7 | RHSA-2008:0890 |
| RHEL 3 | wireshark +1 | 1.0.3-EL3.3 | RHSA-2008:0890 |
Advisories 2
- RHSA-2008:0890 Red Hat Security Advisory: wireshark security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1673-1 wireshark - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 30886 third-party-advisory
- SUSE-SR:2008:017 vendor-advisory
- 30942 third-party-advisory
- FEDORA-2008-6440 vendor-advisory
- RHSA-2008:0890 vendor-advisory
- ADV-2008-1982 vdb-entry
- 31687 third-party-advisory
- http://www.wireshark.org/security/wnpa-sec-2008-03.html
- GLSA-200808-04 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm
- 32091 third-party-advisory
- 20080703 rPSA-2008-0212-1 tshark wireshark mailing-list
- ADV-2008-2773 vdb-entry
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212
- 32944 third-party-advisory
- wireshark-rmi-information-disclosure(43520) vdb-entry
- 30020 vdb-entry
- 31378 third-party-advisory
- 1020404 vdb-entry
- oval:org.mitre.oval:def:11324 vdb-entry signature
- DSA-1673 vendor-advisory
- 31085 third-party-advisory