远程 CentOS Linux 9 主机上安装的多个程序包受到 wireshark-3.4.10-4.el9 版本变更日志中提及的一个漏洞影响。

  - 旧样式分析器中的 f5ethtrailer 无限循环 (CVE-2022-3190)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

The version of wireshark installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3190 advisory.

  - Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to     3.4.15 allows denial of service via packet injection or crafted capture file (CVE-2022-3190)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.4.16. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.16 advisory.

  - The F5 Ethernet Trailer dissector could go into an infinite loop. It may be possible to make Wireshark     consume excessive CPU resources by injecting a malformed packet onto the wire or by convincing someone to     read a malformed packet trace file. (wireshark-bug-18307)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 3.4.16. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.16 advisory.

  - The F5 Ethernet Trailer dissector could go into an infinite loop. It may be possible to make Wireshark     consume excessive CPU resources by injecting a malformed packet onto the wire or by convincing someone to     read a malformed packet trace file. (wireshark-bug-18307)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the wireshark package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to     3.4.15 allows denial of service via packet injection or crafted capture file (CVE-2022-3190)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-1f2fbb087e advisory.

    New version 3.6.10



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
191227	CentOS 9：wireshark-3.4.10-4.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/29	medium
173550	CBL Mariner 2.0 Security Update: wireshark (CVE-2022-3190)	Nessus	MarinerOS Local Security Checks	2023/3/28	2023/8/29	medium
164837	Wireshark 3.4.x < 3.4.16 A Vulnerability (macOS)	Nessus	MacOS X Local Security Checks	2022/9/7	2023/5/25	medium
164838	Wireshark 3.4.x < 3.4.16 A Vulnerability	Nessus	Windows	2022/9/7	2023/5/25	medium
203327	Photon OS 4.0: Wireshark PHSA-2022-4.0-0256	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/24	medium
259439	Linux Distros Unpatched Vulnerability : CVE-2022-3190	Nessus	Misc.	2025/8/30	2025/8/30	medium
169225	Fedora 36 : wireshark (2022-1f2fbb087e)	Nessus	Fedora Local Security Checks	2022/12/23	2024/11/15	critical

检测

插件搜索

medium

medium

medium

medium

medium

medium

critical