The version of Wireshark installed on the remote Windows host is prior to 2.2.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.15 advisory.

  - In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was     addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing '\0'     character. (CVE-2018-11362)

  - In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could     consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths.
    (CVE-2018-11357)

  - In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed     in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.
    (CVE-2018-11356)

  - In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was     addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a buffer     overflow. (CVE-2018-11360)

  - In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was     addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented     certain cleanup. (CVE-2018-11358)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several issues in wireshark, a tool that captures and analyzes packets off the wire, have been found by different people. These are basically issues with length checks or invalid memory access in different dissectors. This could result in infinite loops or crashes by malicious packets.

For Debian 8 'Jessie', these problems have been fixed in version 1.12.1+g01b65bf-4+deb8u16.

We recommend that you upgrade your wireshark packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New version 2.6.1, contains fixes for multiple CVEs.

----

Fixed undefined reference in tshark, corrected build flags usage

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for wireshark fixes the following issues :

Minor vulnerabilities that could be used to trigger dissector crashes or cause excessive memory use by making Wireshark read specially crafted packages from the network or capture files (boo#1094301) :

  - CVE-2018-11356: DNS dissector crash 

  - CVE-2018-11357: Multiple dissectors could consume     excessive memory 

  - CVE-2018-11358: Q.931 dissector crash

  - CVE-2018-11359: The RRC dissector and other dissectors     could crash

  - CVE-2018-11360: GSM A DTAP dissector crash 

  - CVE-2018-11362: LDSS dissector crash 

This update to version 2.4.7 also contains bug fixes and updated protocol support as listed in:
https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
311465	Wireshark 2.2.x < 2.2.15 Multiple Vulnerabilities	Nessus	Windows	2026/5/1	2026/5/1	high
121193	Debian DLA-1634-1 : wireshark security update	Nessus	Debian Local Security Checks	2019/1/16	2024/6/26	high
120367	Fedora 28 : 1:wireshark (2018-3dfee621af)	Nessus	Fedora Local Security Checks	2019/1/3	2024/7/8	high
123176	openSUSE Security Update : wireshark (openSUSE-2019-399)	Nessus	SuSE Local Security Checks	2019/3/27	2024/6/12	high

检测

插件搜索

high

high

high

high