The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0625 advisory.

    - fixes CVE-2010-2287 CVE-2010-2284
    - fix corner case in CVE-2010-2284
    - fixes CVE-2010-1455 CVE-2010-2283 CVE-2010-2284 CVE-2010-2286 CVE-2010-2287

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Wireshark was updated to version 1.4.4 to fix several security issues.

Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer. It was discovered that NULL pointer dereferences, buffer overflows and infinite loops in the SMB, SMB PIPE, ASN1.1 and SigComp dissectors could lead to denial of service or the execution of arbitrary code.

Multiple buffer overflow flaws were found in the Wireshark SigComp Universal Decompressor Virtual Machine (UDVM) dissector. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. (CVE-2010-2287, CVE-2010-2995)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2010-1455, CVE-2010-2283, CVE-2010-2284, CVE-2010-2286)

NOTE: This errata updates Wireshark to version 1.0.15 to resolve these issues.

All running instances of Wireshark must be restarted for the update to take effect.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
68084	Oracle Linux 5 : wireshark (ELSA-2010-0625)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2025/4/29	high
53319	SuSE 10 Security Update : wireshark (ZYPP Patch Number 7439)	Nessus	SuSE Local Security Checks	2011/4/7	2021/1/19	critical
47584	Debian DSA-2066-1 : wireshark - several vulnerabilities	Nessus	Debian Local Security Checks	2010/7/2	2021/1/4	high
60836	Scientific Linux Security Update : wireshark on SL3.x, SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	critical

检测

插件搜索

high

critical

high

critical