PatchTheCVEethereal vulnerabilities
Recent CVEs affecting ethereal products. 4 tracked.
ethereal has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2004-05-04. Highest priority: CVE-2003-0356 (score 63/100).
- CVE-2004-0365 HIGH 7.5 UPGRADE The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote atta
- CVE-2003-1013 HIGH 7.5 UPGRADE The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of ser
- CVE-2003-0356 CRITICAL 9.8 UPGRADE Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of
- CVE-2002-0401 HIGH 7.5 UPGRADE MITIGATE SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or ex
FAQ
How do I fix ethereal vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ethereal being exploited right now?
None of the tracked ethereal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ethereal CVE should I patch first?
CVE-2003-0356 currently ranks highest (63/100): Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of.