Wireshark 2.0.x < 2.0.1 多个漏洞 (macOS)
medium Nessus 插件 ID 368085
语言：
简介
远程 macOS / Mac OS X 主机上安装的应用程序受到多个漏洞的影响。描述
远程 macOS / Mac OS X 主机上安装的 Wireshark 版本低于 2.0.1。因此，如公告 wireshark-2.0.1 所述，会受到多个漏洞的影响。- 之前 Wireshark 2.0.x2.0.1 的 MS-WSP 分析器中的 epan/dissectors/packet-mswsp.c dissect_CPMSetBindings函数不会验证列大小，这允许远程攻击者通过构建的数据包造成拒绝服务（内存消耗或应用程序崩溃）。（CVE-2015-8742）
- 在 Wireshark 1.12.x before 1.12.9 和 2.0.x2.0.1 before 中，NBAP 分析器中的 epan/dissectors/packet-nbap.c 不验证对话数据，从而允许远程攻击者通过构建的数据包造成拒绝服务（空指针取消引用和应用程序崩溃）。（CVE-2015-8711）
- 在 Wireshark 1.12.x 之前 1.12.9 和 2.0.x 之前 2.0.1版本中，NLM 分析器内的 epan/dissectors/packet-nlm.c 中存在双重释放漏洞，启用“针对异步 NLM 匹配 MSG/RES 数据包”选项时，远程攻击者可通过构建的数据包造成拒绝服务（应用程序崩溃）。（CVE-2015-8718）
- 在 Wireshark 1.12.x 之前 1.12.9 和 2.0.x 之前 2.0.1 的 BER 分析器中，epan/dissectors/packet-ber.c 中的 dissect_ber_GeneralizedTime 函数未正确检查 sscanf 返回值，远程攻击者可利用此问题通过构建的数据包造成拒绝服务（应用程序崩溃）。（CVE-2015-8720）
- 在 Wireshark 1.12.x 之前 1.12.9 和 2.0.x 之前 2.0.1 版本中，epan/tvbuff_zlib.c 中的 tvb_uncompress 函数存在缓冲区溢出，允许远程攻击者通过构建的 zlib 压缩数据包造成拒绝服务（应用程序崩溃）。（CVE-2015-8721）
请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。
解决方案
升级至 Wireshark 2.0.1 或更高版本。另见
https://gitlab.com/wireshark/wireshark/-/issues/11548
https://gitlab.com/wireshark/wireshark/-/issues/11602
https://gitlab.com/wireshark/wireshark/-/issues/11726
https://gitlab.com/wireshark/wireshark/-/issues/11767
https://gitlab.com/wireshark/wireshark/-/issues/11789
https://gitlab.com/wireshark/wireshark/-/issues/11790
https://gitlab.com/wireshark/wireshark/-/issues/11791
https://gitlab.com/wireshark/wireshark/-/issues/11792
https://gitlab.com/wireshark/wireshark/-/issues/11793
https://gitlab.com/wireshark/wireshark/-/issues/11794
https://gitlab.com/wireshark/wireshark/-/issues/11797
https://gitlab.com/wireshark/wireshark/-/issues/11815
https://gitlab.com/wireshark/wireshark/-/issues/11817
https://gitlab.com/wireshark/wireshark/-/issues/11820
https://gitlab.com/wireshark/wireshark/-/issues/11821
https://gitlab.com/wireshark/wireshark/-/issues/11823
https://gitlab.com/wireshark/wireshark/-/issues/11826
https://gitlab.com/wireshark/wireshark/-/issues/11827
https://gitlab.com/wireshark/wireshark/-/issues/11829
https://gitlab.com/wireshark/wireshark/-/issues/11830
https://gitlab.com/wireshark/wireshark/-/issues/11831
https://gitlab.com/wireshark/wireshark/-/issues/11835
https://gitlab.com/wireshark/wireshark/-/issues/11841
https://gitlab.com/wireshark/wireshark/-/issues/11846
https://gitlab.com/wireshark/wireshark/-/issues/11876
https://gitlab.com/wireshark/wireshark/-/issues/11931
https://www.wireshark.org/docs/relnotes/wireshark-2.0.1.html
https://www.wireshark.org/security/wnpa-sec-2015-31
https://www.wireshark.org/security/wnpa-sec-2015-37
https://www.wireshark.org/security/wnpa-sec-2015-39
https://www.wireshark.org/security/wnpa-sec-2015-40
https://www.wireshark.org/security/wnpa-sec-2015-41
https://www.wireshark.org/security/wnpa-sec-2015-42
https://www.wireshark.org/security/wnpa-sec-2015-43
https://www.wireshark.org/security/wnpa-sec-2015-44
https://www.wireshark.org/security/wnpa-sec-2015-45
https://www.wireshark.org/security/wnpa-sec-2015-46
https://www.wireshark.org/security/wnpa-sec-2015-47
https://www.wireshark.org/security/wnpa-sec-2015-48
https://www.wireshark.org/security/wnpa-sec-2015-49
https://www.wireshark.org/security/wnpa-sec-2015-50
https://www.wireshark.org/security/wnpa-sec-2015-51
https://www.wireshark.org/security/wnpa-sec-2015-52
https://www.wireshark.org/security/wnpa-sec-2015-53
https://www.wireshark.org/security/wnpa-sec-2015-54
https://www.wireshark.org/security/wnpa-sec-2015-55
https://www.wireshark.org/security/wnpa-sec-2015-56
https://www.wireshark.org/security/wnpa-sec-2015-57
https://www.wireshark.org/security/wnpa-sec-2015-58
插件详情
严重性: Medium
ID: 368085
文件名: macosx_wireshark_2_0_1.nasl
版本: 1.1
类型: Local
代理: macosx
发布时间: 2026/10/20
最近更新时间: 2026/10/20
支持的传感器: Frictionless Assessment Agent, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
风险信息
VPR
风险因素: Medium
分数: 5
百分位: 93.48
CVSS v2
风险因素: Medium
基本分数: 4.3
时间分数: 3.4
矢量: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS 分数来源: CVE-2015-8742
CVSS v3
风险因素: Medium
基本分数: 5.5
时间分数: 5
矢量: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
时间矢量: CVSS:3.0/E:P/RL:O/RC:C
漏洞信息
CPE: cpe:/a:wireshark:wireshark
必需的 KB 项: Host/local_checks_enabled, Host/MacOSX/Version, installed_sw/Wireshark
可利用: true
易利用性: Exploits are available
补丁发布日期: 2015/12/29
漏洞发布日期: 2015/12/3
参考资料信息
CVE: CVE-2015-8711, CVE-2015-8718, CVE-2015-8720, CVE-2015-8721, CVE-2015-8722, CVE-2015-8723, CVE-2015-8725, CVE-2015-8726, CVE-2015-8727, CVE-2015-8728, CVE-2015-8729, CVE-2015-8730, CVE-2015-8731, CVE-2015-8732, CVE-2015-8733, CVE-2015-8734, CVE-2015-8735, CVE-2015-8736, CVE-2015-8737, CVE-2015-8738, CVE-2015-8739, CVE-2015-8740, CVE-2015-8741, CVE-2015-8742