Package name
Advisory ID
Affected versions
9.2 i586 , 9.1 i586 , 9.1 i586

Problem description

Two vulnerabilities were discovered in versions of Ethereal prior to 0.10.0 that can be exploited to make Ethereal crash by injecting malformed packets onto the wire or by convincing a user to read a malformed packet trace file. The first vulnerability is in the SMB dissector and the second is in the Q.391 dissector. It is not known whether or not these issues could lead to the execution of arbitrary code. The updated packages provide Ethereal 0.10.0 which is not vulnerable to these issues.

Updated packages

9.2 i586

 c523748c0251859d6413d494d3ba1fe9  9.2/RPMS/ethereal-0.10.0a-0.1.92mdk.i586.rpm
07fdefedc257d3a53f3e0a3da2c042b2  9.2/SRPMS/ethereal-0.10.0a-0.1.92mdk.src.rpm

9.1 i586

 a8bcf806b679829441411a61692112c4  ppc/9.1/RPMS/ethereal-0.10.0a-0.1.91mdk.ppc.rpm
0418ffe78b92500b0e85516c9a2877ba  ppc/9.1/SRPMS/ethereal-0.10.0a-0.1.91mdk.src.rpm

9.1 i586

 15b93589c8e2c4a158e392d6e935d107  9.1/RPMS/ethereal-0.10.0a-0.1.91mdk.i586.rpm
0418ffe78b92500b0e85516c9a2877ba  9.1/SRPMS/ethereal-0.10.0a-0.1.91mdk.src.rpm