ethereal vulnerabilities and fixes

Recent CVEs affecting ethereal, with upgrade or downgrade steps. 107 tracked.

ethereal has 107 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 18. Most recent: 2010-05-12. Highest priority: CVE-2003-0356 (score 63/100).

• CVE-2010-1455 MEDIUM 4.3 DOWNGRADE DOWNGRADE The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote att
• CVE-2007-6121 MEDIUM 5.0 DOWNGRADE DOWNGRADE Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) vi
• CVE-2007-6120 MEDIUM 5.0 DOWNGRADE DOWNGRADE The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a
• CVE-2007-6118 HIGH 7.8 DOWNGRADE DOWNGRADE The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a deni
• CVE-2007-6111 HIGH 7.1 DOWNGRADE DOWNGRADE Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial
• CVE-2006-3632 HIGH 10.0 DOWNGRADE Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of serv
• CVE-2006-3629 HIGH 7.8 DOWNGRADE Unspecified vulnerability in the MOUNT dissector in Wireshark (aka Ethereal) 0.9.4 to 0.99.0 allows remote att
• CVE-2006-3628 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to
• CVE-2006-1940 MEDIUM 5.0 DOWNGRADE Unspecified vulnerability in Ethereal 0.10.4 up to 0.10.14 allows remote attackers to cause a denial of servic
• CVE-2006-1939 MEDIUM 5.0 DOWNGRADE Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial
• CVE-2006-1938 MEDIUM 5.0 DOWNGRADE Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial
• CVE-2006-1937 MEDIUM 5.0 DOWNGRADE Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial
• CVE-2006-1936 MEDIUM 5.0 DOWNGRADE Buffer overflow in Ethereal 0.8.5 up to 0.10.14 allows remote attackers to execute arbitrary code via the teln
• CVE-2006-1935 MEDIUM 5.0 DOWNGRADE Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service (crash)
• CVE-2006-1934 MEDIUM 5.0 DOWNGRADE Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service
• CVE-2006-1933 MEDIUM 5.0 DOWNGRADE Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial
• CVE-2006-1932 HIGH 10.0 DOWNGRADE Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote at
• CVE-2005-4585 HIGH 7.8 DOWNGRADE Unspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to 0.10.13 allows remote attackers to cause
• CVE-2005-3651 HIGH 7.5 DOWNGRADE Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in E
• CVE-2005-3313 MEDIUM 5.0 DOWNGRADE The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite
• CVE-2005-3249 MEDIUM 6.4 DOWNGRADE Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause
• CVE-2005-3248 MEDIUM 5.0 DOWNGRADE Unspecified vulnerability in the X11 dissector in Ethereal 0.10.12 and earlier allows remote attackers to caus
• CVE-2005-3247 MEDIUM 5.0 DOWNGRADE The SigComp UDVM in Ethereal 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via
• CVE-2005-3246 MEDIUM 5.0 DOWNGRADE Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (null dereference) via unkno
• CVE-2005-3245 MEDIUM 5.0 DOWNGRADE Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RP
• CVE-2005-3244 MEDIUM 5.0 DOWNGRADE The BER dissector in Ethereal 0.10.3 to 0.10.12 allows remote attackers to cause a denial of service (infinite
• CVE-2005-3243 HIGH 7.5 DOWNGRADE Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary co
• CVE-2005-3242 MEDIUM 5.0 DOWNGRADE Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors
• CVE-2005-3241 MEDIUM 5.0 DOWNGRADE Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service (
• CVE-2005-3184 HIGH 10.0 UPGRADE Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (pac
• CVE-2005-2367 HIGH 7.5 DOWNGRADE Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in
• CVE-2005-2366 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of se
• CVE-2005-2365 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause
• CVE-2005-2364 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, or (3) CAMEL dissector in Ethereal 0.8.20 through
• CVE-2005-2363 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H
• CVE-2005-2362 MEDIUM 5.0 DOWNGRADE Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a
• CVE-2005-2361 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (
• CVE-2005-2360 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the LDAP dissector in Ethereal 0.8.5 through 0.10.11 allows remote attackers to cause
• CVE-2005-1470 MEDIUM 5.0 DOWNGRADE Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in
• CVE-2005-1469 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 allows remote attackers to cause the dis
• CVE-2005-1468 MEDIUM 5.0 DOWNGRADE Multiple unknown vulnerabilities in the (1) WSP, (2) Q.931, (3) H.245, (4) KINK, (5) MGCP, (6) RPC, (7) SMBMai
• CVE-2005-1467 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the NDPS dissector in Ethereal before 0.10.11 allows remote attackers to cause a deni
• CVE-2005-1466 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the DICOM dissector in Ethereal before 0.10.11 allows remote attackers to cause a den
• CVE-2005-1465 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the NCP dissector in Ethereal before 0.10.11 allow remote attackers to cause a denial
• CVE-2005-1464 MEDIUM 5.0 DOWNGRADE Multiple unknown vulnerabilities in the (1) KINK, (2) L2TP, (3) MGCP, (4) EIGRP, (5) DLSw, (6) MEGACO, (7) LMP
• CVE-2005-1463 HIGH 7.5 DOWNGRADE Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 ma
• CVE-2005-1462 HIGH 7.5 DOWNGRADE Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execu
• CVE-2005-1461 HIGH 7.5 DOWNGRADE Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509,
• CVE-2005-1460 MEDIUM 5.0 DOWNGRADE Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (as
• CVE-2005-1459 MEDIUM 5.0 DOWNGRADE Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (
• CVE-2005-1458 MEDIUM 5.0 DOWNGRADE Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and att
• CVE-2005-1457 MEDIUM 5.0 DOWNGRADE Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6)
• CVE-2005-1456 MEDIUM 5.0 DOWNGRADE Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow re
• CVE-2005-1281 MEDIUM 5.0 DOWNGRADE Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafte
• CVE-2005-0766 MEDIUM 5.0 UPGRADE Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to caus
• CVE-2005-0765 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of se
• CVE-2005-0739 MEDIUM 5.0 UPGRADE The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for for
• CVE-2005-0705 MEDIUM 5.0 DOWNGRADE The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled
• CVE-2005-0704 HIGH 7.5 DOWNGRADE Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a
• CVE-2005-0699 HIGH 7.5 DOWNGRADE MITIGATE Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11
• CVE-2005-0084 HIGH 7.5 DOWNGRADE Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbi
• CVE-2005-0010 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause
• CVE-2005-0009 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to c
• CVE-2005-0008 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause
• CVE-2005-0007 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause
• CVE-2005-0006 MEDIUM 5.0 DOWNGRADE The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (inf
• CVE-2004-1761 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation
• CVE-2004-1145 MEDIUM 5.0 DOWNGRADE DOWNGRADE Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via
• CVE-2004-1142 MEDIUM 5.0 DOWNGRADE DOWNGRADE Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a cer
• CVE-2004-1141 MEDIUM 5.0 DOWNGRADE The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (app
• CVE-2004-1140 MEDIUM 5.0 DOWNGRADE Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and poss
• CVE-2004-1139 MEDIUM 5.0 DOWNGRADE DOWNGRADE Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to caus
• CVE-2004-0635 MEDIUM 5.0 DOWNGRADE MITIGATE The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (pro
• CVE-2004-0634 MEDIUM 5.0 DOWNGRADE MITIGATE The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of serv
• CVE-2004-0633 MEDIUM 5.0 DOWNGRADE MITIGATE The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (pr
• CVE-2004-0507 HIGH 10.0 DOWNGRADE DOWNGRADE Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial
• CVE-2004-0506 MEDIUM 5.0 DOWNGRADE DOWNGRADE The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash)
• CVE-2004-0505 MEDIUM 5.0 DOWNGRADE DOWNGRADE The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via u
• CVE-2004-0504 MEDIUM 5.0 DOWNGRADE DOWNGRADE Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between
• CVE-2004-0367 MEDIUM 5.0 DOWNGRADE Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Prese
• CVE-2004-0365 HIGH 7.5 UPGRADE The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote atta
• CVE-2004-0176 MEDIUM 5.0 DOWNGRADE Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and
• CVE-2003-1013 HIGH 7.5 UPGRADE The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of ser
• CVE-2003-1012 MEDIUM 5.0 DOWNGRADE The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malform
• CVE-2003-0927 HIGH 7.5 DOWNGRADE Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service
• CVE-2003-0926 MEDIUM 5.0 DOWNGRADE Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service (crash) via c
• CVE-2003-0925 HIGH 7.5 DOWNGRADE Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possib
• CVE-2003-0432 HIGH 10.0 UPGRADE Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BG
• CVE-2003-0431 HIGH 10.0 UPGRADE The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer si
• CVE-2003-0430 MEDIUM 5.0 UPGRADE The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (cras
• CVE-2003-0429 HIGH 7.5 UPGRADE The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and poss
• CVE-2003-0428 MEDIUM 5.0 UPGRADE Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers
• CVE-2003-0357 HIGH 7.5 UPGRADE Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a den
• CVE-2003-0356 CRITICAL 9.8 UPGRADE Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of
• CVE-2003-0159 HIGH 7.5 DOWNGRADE Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause
• CVE-2003-0081 HIGH 7.5 DOWNGRADE Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows r
• CVE-2002-1356 HIGH 7.5 UPGRADE Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute a
• CVE-2002-1355 MEDIUM 5.0 UPGRADE Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers t
• CVE-2002-0834 HIGH 7.5 DOWNGRADE Buffer overflow in the ISIS dissector for Ethereal 0.9.5 and earlier allows remote attackers to cause a denial
• CVE-2002-0822 HIGH 7.5 UPGRADE Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrar
• CVE-2002-0821 HIGH 7.5 UPGRADE Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute
• CVE-2002-0404 MEDIUM 5.0 DOWNGRADE Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service
• CVE-2002-0403 MEDIUM 5.0 DOWNGRADE DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption)
• CVE-2002-0402 HIGH 7.5 DOWNGRADE Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of se
• CVE-2002-0401 HIGH 7.5 UPGRADE MITIGATE SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or ex
• CVE-2002-0353 MEDIUM 5.0 DOWNGRADE The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) vi
• CVE-2000-1174 HIGH 7.5 UPGRADE Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute

FAQ

How do I fix ethereal vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ethereal being exploited right now?

None of the tracked ethereal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ethereal CVE should I patch first?

CVE-2003-0356 currently ranks highest (63/100): Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of.

RSS feed for ethereal · ← Back to latest CVEs