The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0341 advisory.

    [1.0.15-6.0.1.el5]
    - Added oracle-ocfs2-network.patch
    - increase max packet size to 65536 (Herbert van den Bergh) [orabug 13542633]

    [1.0.15-6]
    - security patches
    - Resolves: CVE-2012-6056                 CVE-2012-6060                 CVE-2012-6061                 CVE-2012-6062                 CVE-2013-3557                 CVE-2013-3559                 CVE-2013-4081                 CVE-2013-4083                 CVE-2013-4927                 CVE-2013-4931                 CVE-2013-4932                 CVE-2013-4933                 CVE-2013-4934                 CVE-2013-4935                 CVE-2013-5721                 CVE-2013-7112                 CVE-2014-2281                 CVE-2014-2299

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0341 advisory.

    Wireshark is a network protocol analyzer. It is used to capture and browse     the traffic running on a computer network.

    Multiple flaws were found in Wireshark. If Wireshark read a malformed     packet off a network or opened a malicious dump file, it could crash or,     possibly, execute arbitrary code as the user running Wireshark.
    (CVE-2013-3559, CVE-2013-4083, CVE-2014-2281, CVE-2014-2299)

    Several denial of service flaws were found in Wireshark. Wireshark could     crash or stop responding if it read a malformed packet off a network, or     opened a malicious dump file. (CVE-2012-5595, CVE-2012-5598, CVE-2012-5599,     CVE-2012-5600, CVE-2012-6056, CVE-2012-6060, CVE-2012-6061, CVE-2012-6062,     CVE-2013-3557, CVE-2013-4081, CVE-2013-4927, CVE-2013-4931, CVE-2013-4932,     CVE-2013-4933, CVE-2013-4934, CVE-2013-4935, CVE-2013-5721, CVE-2013-7112)

    All Wireshark users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues. All running instances     of Wireshark must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2013-3559, CVE-2013-4083, CVE-2014-2281, CVE-2014-2299)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2012-5595, CVE-2012-5598, CVE-2012-5599, CVE-2012-5600, CVE-2012-6056, CVE-2012-6060, CVE-2012-6061, CVE-2012-6062, CVE-2013-3557, CVE-2013-4081, CVE-2013-4927, CVE-2013-4931, CVE-2013-4932, CVE-2013-4933, CVE-2013-4934, CVE-2013-4935, CVE-2013-5721, CVE-2013-7112)

All running instances of Wireshark must be restarted for the update to take effect.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1569 advisory.

    Wireshark, previously known as Ethereal, is a network protocol analyzer.
    It is used to capture and browse the traffic running on a computer network.

    Two flaws were found in Wireshark. If Wireshark read a malformed packet off     a network or opened a malicious dump file, it could crash or, possibly,     execute arbitrary code as the user running Wireshark. (CVE-2013-3559,     CVE-2013-4083)

    Several denial of service flaws were found in Wireshark. Wireshark could     crash or stop responding if it read a malformed packet off a network, or     opened a malicious dump file. (CVE-2012-2392, CVE-2012-3825, CVE-2012-4285,     CVE-2012-4288, CVE-2012-4289, CVE-2012-4290, CVE-2012-4291, CVE-2012-4292,     CVE-2012-5595, CVE-2012-5597, CVE-2012-5598, CVE-2012-5599, CVE-2012-5600,     CVE-2012-6056, CVE-2012-6059, CVE-2012-6060, CVE-2012-6061, CVE-2012-6062,     CVE-2013-3557, CVE-2013-3561, CVE-2013-4081, CVE-2013-4927, CVE-2013-4931,     CVE-2013-4932, CVE-2013-4933, CVE-2013-4934, CVE-2013-4935, CVE-2013-4936,     CVE-2013-5721)

    The wireshark packages have been upgraded to upstream version 1.8.10, which     provides a number of bug fixes and enhancements over the previous versions.
    For more information on the bugs fixed, enhancements included, and     supported protocols introduced, refer to the Wireshark Release Notes,     linked to in the References. (BZ#711024)

    This update also fixes the following bugs:

    * Previously, Wireshark did not parse the RECLAIM-COMPLETE opcode when     inspecting traffic generated by NFSv4.1. A patch has been provided to     enable the parsing of the RECLAIM_COMPLETE opcode, and Wireshark is now     able to properly dissect and handle NFSv4.1 traffic. (BZ#750712)

    * Prior to this update, frame arrival times in a text file were reported     one hour ahead from the timestamps in the packet capture file.
    This resulted in various failures being reported by the dfilter-test.py     test suite. To fix this bug, frame arrival timestamps have been shifted by     one hour, thus fixing this bug. (BZ#832021)

    * The tshark -D command returned output to STDERR instead of STDOUT,     which could break scripts that are parsing the tshark -D output. This bug     has been fixed, and the tshark -D command now writes output data to a     correct standard stream. (BZ#1004636)

    * Due to an array overrun, Wireshark could experience undefined program     behavior or could unexpectedly terminate. With this update, proper array     handling ensures Wireshark no longer crashes in the described scenario.
    (BZ#715560)

    * Previously, the dftest and randpkt command line utilities lacked manual     pages. This update adds proper manual pages for both utilities. (BZ#659661)

    In addition, this update adds the following enhancements:

    * With this update, Wireshark is able to properly dissect and handle     InfiniBand and GlusterFS traffic. (BZ#699636, BZ#858976)

    All Wireshark users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues and add these     enhancements. All running instances of Wireshark must be restarted for the     update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1569 advisory.

    - Resolves: CVE-2013-4927                 CVE-2013-4931                 CVE-2013-4932                 CVE-2013-4933                 CVE-2013-4934                 CVE-2013-4935                 CVE-2013-3557

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple vulnerabilities were discovered in the dissectors/parsers for PKTC, IAX2, GSM CBCH and NCP which could result in denial of service.

This update also fixes many older less important issues by updating the package to the version found in Debian 8 also known as Jessie.

For Debian 7 'Wheezy', these problems have been fixed in version 1.12.1+g01b65bf-4+deb8u6~deb7u1.

We recommend that you upgrade your wireshark packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Solaris system is missing necessary patches to address security updates :

  - Wireshark 1.8.x before 1.8.4 allows remote attackers to     obtain sensitive hostname information by reading pcap-ng     files. (CVE-2012-6052)

  - epan/dissectors/packet-usb.c in the USB dissector in     Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4     relies on a length field to calculate an offset value,     which allows remote attackers to cause a denial of     service (infinite loop) via a zero value for this field.
    (CVE-2012-6053)

  - The dissect_sflow_245_address_type function in     epan/dissectors/packet-sflow.c in the sFlow dissector in     Wireshark 1.8.x before 1.8.4 does not properly handle     length calculations for an invalid IP address type,     which allows remote attackers to cause a denial of     service (infinite loop) via a packet that is neither     IPv4 nor IPv6. (CVE-2012-6054)

  - epan/dissectors/packet-3g-a11.c in the 3GPP2 A11     dissector in Wireshark 1.8.x before 1.8.4 allows remote     attackers to cause a denial of service (infinite loop)     via a zero value in a sub-type length field.
    (CVE-2012-6055)

  - Integer overflow in the dissect_sack_chunk function in     epan/dissectors/ packet-sctp.c in the SCTP dissector in     Wireshark 1.8.x before 1.8.4 allows remote attackers to     cause a denial of service (infinite loop) via a crafted     Duplicate TSN count. (CVE-2012-6056)

  - The dissect_eigrp_metric_comm function in     epan/dissectors/packet-eigrp.c in the EIGRP dissector in     Wireshark 1.8.x before 1.8.4 uses the wrong data type     for a certain offset value, which allows remote     attackers to cause a denial of service (integer overflow     and infinite loop) via a malformed packet.
    (CVE-2012-6057)

  - Integer overflow in the dissect_icmpv6 function in     epan/dissectors/ packet-icmpv6.c in the ICMPv6 dissector     in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4     allows remote attackers to cause a denial of service     (infinite loop) via a crafted Number of Sources value.
    (CVE-2012-6058)

  - The dissect_isakmp function in     epan/dissectors/packet-isakmp.c in the ISAKMP dissector     in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4     uses an incorrect data structure to determine IKEv2     decryption parameters, which allows remote attackers to     cause a denial of service (application crash) via a     malformed packet. (CVE-2012-6059)

  - Integer overflow in the dissect_iscsi_pdu function in     epan/dissectors/ packet-iscsi.c in the iSCSI dissector     in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4     allows remote attackers to cause a denial of service     (infinite loop) via a malformed packet. (CVE-2012-6060)

  - The dissect_wtp_common function in     epan/dissectors/packet-wtp.c in the WTP dissector in     Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4     uses an incorrect data type for a certain length field,     which allows remote attackers to cause a denial of     service (integer overflow and infinite loop) via a     crafted value in a packet. (CVE-2012-6061)

  - The dissect_rtcp_app function in     epan/dissectors/packet-rtcp.c in the RTCP dissector in     Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4     allows remote attackers to cause a denial of service     (infinite loop) via a crafted packet. (CVE-2012-6062)

Updated wireshark packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network.

Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2013-3559, CVE-2013-4083)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2012-2392, CVE-2012-3825, CVE-2012-4285, CVE-2012-4288, CVE-2012-4289, CVE-2012-4290, CVE-2012-4291, CVE-2012-4292, CVE-2012-5595, CVE-2012-5597, CVE-2012-5598, CVE-2012-5599, CVE-2012-5600, CVE-2012-6056, CVE-2012-6059, CVE-2012-6060, CVE-2012-6061, CVE-2012-6062, CVE-2013-3557, CVE-2013-3561, CVE-2013-4081, CVE-2013-4927, CVE-2013-4931, CVE-2013-4932, CVE-2013-4933, CVE-2013-4934, CVE-2013-4935, CVE-2013-4936, CVE-2013-5721)

The wireshark packages have been upgraded to upstream version 1.8.10, which provides a number of bug fixes and enhancements over the previous versions. For more information on the bugs fixed, enhancements included, and supported protocols introduced, refer to the Wireshark Release Notes, linked to in the References. (BZ#711024)

This update also fixes the following bugs :

* Previously, Wireshark did not parse the RECLAIM-COMPLETE opcode when inspecting traffic generated by NFSv4.1. A patch has been provided to enable the parsing of the RECLAIM_COMPLETE opcode, and Wireshark is now able to properly dissect and handle NFSv4.1 traffic. (BZ#750712)

* Prior to this update, frame arrival times in a text file were reported one hour ahead from the timestamps in the packet capture file. This resulted in various failures being reported by the dfilter-test.py test suite. To fix this bug, frame arrival timestamps have been shifted by one hour, thus fixing this bug. (BZ#832021)

* The 'tshark -D' command returned output to STDERR instead of STDOUT, which could break scripts that are parsing the 'tshark -D' output.
This bug has been fixed, and the 'tshark -D' command now writes output data to a correct standard stream. (BZ#1004636)

* Due to an array overrun, Wireshark could experience undefined program behavior or could unexpectedly terminate. With this update, proper array handling ensures Wireshark no longer crashes in the described scenario. (BZ#715560)

* Previously, the dftest and randpkt command line utilities lacked manual pages. This update adds proper manual pages for both utilities.
(BZ#659661)

In addition, this update adds the following enhancements :

* With this update, Wireshark is able to properly dissect and handle InfiniBand and GlusterFS traffic. (BZ#699636, BZ#858976)

All Wireshark users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements. All running instances of Wireshark must be restarted for the update to take effect.

Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2013-3559 , CVE-2013-4083)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2012-2392 , CVE-2012-3825 , CVE-2012-4285 , CVE-2012-4288 , CVE-2012-4289 , CVE-2012-4290 , CVE-2012-4291 , CVE-2012-4292 , CVE-2012-5595 , CVE-2012-5597 , CVE-2012-5598 , CVE-2012-5599 , CVE-2012-5600 , CVE-2012-6056 , CVE-2012-6059 , CVE-2012-6060 , CVE-2012-6061 , CVE-2012-6062 , CVE-2013-3557 , CVE-2013-3561 , CVE-2013-4081 , CVE-2013-4927 , CVE-2013-4931 , CVE-2013-4932 , CVE-2013-4933 , CVE-2013-4934 , CVE-2013-4935 , CVE-2013-4936 , CVE-2013-5721)

Updated wireshark packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Wireshark is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network.

Multiple flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2013-3559, CVE-2013-4083, CVE-2014-2281, CVE-2014-2299)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2012-5595, CVE-2012-5598, CVE-2012-5599, CVE-2012-5600, CVE-2012-6056, CVE-2012-6060, CVE-2012-6061, CVE-2012-6062, CVE-2013-3557, CVE-2013-4081, CVE-2013-4927, CVE-2013-4931, CVE-2013-4932, CVE-2013-4933, CVE-2013-4934, CVE-2013-4935, CVE-2013-5721, CVE-2013-7112)

All Wireshark users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running instances of Wireshark must be restarted for the update to take effect.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
73279	Oracle Linux 5 : wireshark (ELSA-2014-0341)	Nessus	Oracle Linux Local Security Checks	2014/4/1	2025/9/23	high
73281	RHEL 5 : wireshark (RHSA-2014:0341)	Nessus	Red Hat Local Security Checks	2014/4/1	2025/9/24	high
73285	Scientific Linux Security Update : wireshark on SL5.x i386/x86_64 (20140331)	Nessus	Scientific Linux Local Security Checks	2014/4/1	2021/1/14	high
71005	RHEL 6 : wireshark (RHSA-2013:1569)	Nessus	Red Hat Local Security Checks	2013/11/21	2025/9/24	high
71105	Oracle Linux 6 : wireshark (ELSA-2013-1569)	Nessus	Oracle Linux Local Security Checks	2013/11/27	2025/9/23	high
91395	Debian DLA-497-1 : wireshark security update	Nessus	Debian Local Security Checks	2016/6/1	2021/1/11	medium
80806	Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_fixed_in_wireshark)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	medium
79162	CentOS 6 : wireshark (CESA-2013:1569)	Nessus	CentOS Local Security Checks	2014/11/12	2021/1/4	high
71268	Amazon Linux AMI : wireshark (ALAS-2013-251)	Nessus	Amazon Linux Local Security Checks	2013/12/10	2019/7/10	high
73276	CentOS 5 : wireshark (CESA-2014:0341)	Nessus	CentOS Local Security Checks	2014/4/1	2021/1/4	high

检测

插件搜索

high

high

high

high

high

medium

medium

high

high

high