Wireshark 1.12.x < 1.12.9 多个漏洞 (macOS)
medium Nessus 插件 ID 363940
语言：
简介
远程 macOS / Mac OS X 主机上安装的应用程序受到多个漏洞的影响。描述
远程 macOS / Mac OS X 主机上安装的 Wireshark 版本低于 1.12.9。因此，如公告 wireshark-1.12.9 所述，会受到多个漏洞的影响。- 在 Wireshark 1.12.x 之前 1.12.9 版本 2.0.x 和以前 2.0.1 版本中，Sniffer 文件解析器内 wiretap/ngsniffer.c 的 ngsniffer_process_record 函数未验证记录长度和记录标头长度之间的关系，远程攻击者可利用此问题通过构建的文件造成拒绝服务（越界读取和应用程序崩溃）。（CVE-2015-8733）
- 在 Wireshark 1.12.x before 1.12.9 和 2.0.x2.0.1 before 中，NBAP 分析器中的 epan/dissectors/packet-nbap.c 不验证对话数据，从而允许远程攻击者通过构建的数据包造成拒绝服务（空指针取消引用和应用程序崩溃）。（CVE-2015-8711）
- 以前 1.12.9 Wireshark 1.12.x 的 UMTS FP 分析器中的 epan/dissectors/packet-umts_fp.c 中的 dissect_hsdsch_channel_info 函数不会验证 PDU 的数量，这允许远程攻击者通过构建的数据包造成拒绝服务（应用程序崩溃）。（CVE-2015-8712）
- 在 Wireshark 1.12.x 之前1.12.9，UMTS FP 分析器内的 epan/dissectors/packet-umts_fp.c 未正确为信道 ID 映射预留内存，远程攻击者可利用此问题，通过构建的数据包造成拒绝服务（越界内存访问和应用程序崩溃）。（CVE-2015-8713）
- 以前1.12.9，Wireshark 1.12.x 中 DCOM 分析器的 epan/dissectors/packet-dcom.c 中的 dissect_dcom_OBJREF 函数未对特定 IPv4 数据结构进行初始化，这允许远程攻击者通过构建的数据包造成拒绝服务（应用程序崩溃）。（CVE-2015-8714）
请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。
解决方案
升级至 Wireshark 1.12.9 或更高版本。另见
https://gitlab.com/wireshark/wireshark/-/issues/10988
https://gitlab.com/wireshark/wireshark/-/issues/11548
https://gitlab.com/wireshark/wireshark/-/issues/11602
https://gitlab.com/wireshark/wireshark/-/issues/11606
https://gitlab.com/wireshark/wireshark/-/issues/11607
https://gitlab.com/wireshark/wireshark/-/issues/11610
https://gitlab.com/wireshark/wireshark/-/issues/11767
https://gitlab.com/wireshark/wireshark/-/issues/11789
https://gitlab.com/wireshark/wireshark/-/issues/11790
https://gitlab.com/wireshark/wireshark/-/issues/11791
https://gitlab.com/wireshark/wireshark/-/issues/11792
https://gitlab.com/wireshark/wireshark/-/issues/11793
https://gitlab.com/wireshark/wireshark/-/issues/11794
https://gitlab.com/wireshark/wireshark/-/issues/11797
https://gitlab.com/wireshark/wireshark/-/issues/11815
https://gitlab.com/wireshark/wireshark/-/issues/11826
https://gitlab.com/wireshark/wireshark/-/issues/11827
https://gitlab.com/wireshark/wireshark/-/issues/11829
https://gitlab.com/wireshark/wireshark/-/issues/11830
https://gitlab.com/wireshark/wireshark/-/issues/11835
https://gitlab.com/wireshark/wireshark/-/issues/11841
https://gitlab.com/wireshark/wireshark/-/issues/9887
https://www.wireshark.org/docs/relnotes/wireshark-1.12.9.html
https://www.wireshark.org/security/wnpa-sec-2015-31
https://www.wireshark.org/security/wnpa-sec-2015-32
https://www.wireshark.org/security/wnpa-sec-2015-33
https://www.wireshark.org/security/wnpa-sec-2015-34
https://www.wireshark.org/security/wnpa-sec-2015-35
https://www.wireshark.org/security/wnpa-sec-2015-36
https://www.wireshark.org/security/wnpa-sec-2015-37
https://www.wireshark.org/security/wnpa-sec-2015-38
https://www.wireshark.org/security/wnpa-sec-2015-39
https://www.wireshark.org/security/wnpa-sec-2015-40
https://www.wireshark.org/security/wnpa-sec-2015-41
https://www.wireshark.org/security/wnpa-sec-2015-42
https://www.wireshark.org/security/wnpa-sec-2015-43
https://www.wireshark.org/security/wnpa-sec-2015-44
https://www.wireshark.org/security/wnpa-sec-2015-45
https://www.wireshark.org/security/wnpa-sec-2015-46
https://www.wireshark.org/security/wnpa-sec-2015-47
https://www.wireshark.org/security/wnpa-sec-2015-48
https://www.wireshark.org/security/wnpa-sec-2015-49
插件详情
严重性: Medium
ID: 363940
文件名: macosx_wireshark_1_12_9.nasl
版本: 1.1
类型: Local
代理: macosx
发布时间: 2026/10/7
最近更新时间: 2026/10/7
支持的传感器: Frictionless Assessment Agent, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
风险信息
VPR
风险因素: Medium
分数: 5
百分位: 93.48
CVSS v2
风险因素: Medium
基本分数: 4.3
时间分数: 3.4
矢量: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS 分数来源: CVE-2015-8733
CVSS v3
风险因素: Medium
基本分数: 5.5
时间分数: 5
矢量: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
时间矢量: CVSS:3.0/E:P/RL:O/RC:C
漏洞信息
CPE: cpe:/a:wireshark:wireshark
必需的 KB 项: Host/local_checks_enabled, Host/MacOSX/Version, installed_sw/Wireshark
可利用: true
易利用性: Exploits are available
补丁发布日期: 2015/12/29
漏洞发布日期: 2015/12/3
参考资料信息
CVE: CVE-2015-8711, CVE-2015-8712, CVE-2015-8713, CVE-2015-8714, CVE-2015-8715, CVE-2015-8716, CVE-2015-8717, CVE-2015-8718, CVE-2015-8719, CVE-2015-8720, CVE-2015-8721, CVE-2015-8722, CVE-2015-8723, CVE-2015-8725, CVE-2015-8726, CVE-2015-8727, CVE-2015-8728, CVE-2015-8729, CVE-2015-8730, CVE-2015-8731, CVE-2015-8732, CVE-2015-8733