The version of Wireshark installed on the remote Windows host is prior to 2.2.16. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.16 advisory.

  - In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go     into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that     are too long. (CVE-2018-14368)

  - In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop     that was addressed by validating a chunk size. (CVE-2018-7333)

  - In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was     addressed by not proceeding with dissection after encountering an unexpected type. (CVE-2018-7321)

  - In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite loop that     was addressed by checking for integer wraparound. (CVE-2018-7322)

  - In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was     addressed by ensuring that a calculated length was monotonically increasing. (CVE-2018-7323)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.4.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.4.8 advisory.

  - In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was     addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read. (CVE-2018-14370)

  - In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go     into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that     are too long. (CVE-2018-14368)

  - In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into     a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths.
    (CVE-2018-14342)

  - In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was     addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-     read. (CVE-2018-14344)

  - In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib     decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid     a buffer over-read. (CVE-2018-14340)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
311411	Wireshark 2.2.x < 2.2.16 Multiple Vulnerabilities	Nessus	Windows	2026/5/1	2026/5/1	high
311413	Wireshark 2.4.x < 2.4.8 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2026/5/1	2026/5/1	high

检测

插件搜索

high

high