The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-33:01 advisory.

    Wireshark is a network traffic analyzer for Unix-ish operating systems.
    This package lays base for libpcap, a packet capture and filtering library, contains command-line     utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged     separately to GTK+ package.
    Security issues fixed with this release:
     CVE-2011-1958     Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a     denial of service (NULL pointer dereference and application crash) via a crafted Diameter dictionary file.
     CVE-2011-1959     The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does     not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of     service (application crash) via a large length value in a snoop file that triggers a stack-based buffer     over-read.
     CVE-2011-2175     Integer underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and     1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a     malformed Visual Networks file that triggers a heap-based buffer over-read.
     CVE-2011-2698     Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI MAP     dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial     of service (infinite loop) via an invalid packet.
     CVE-2011-4102     Heap-based buffer overflow in the erf_read_header function in wiretap/erf.c in the ERF file parser in     Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service     (application crash) via a malformed file.
     CVE-2012-0041     The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5     allows remote attackers to cause a denial of service (application crash) via a long packet in a capture     file, as demonstrated by an airopeek file.
     CVE-2012-0042     Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions,     which allows remote attackers to cause a denial of service (NULL pointer dereference and application     crash) via a crafted packet, related to epan/to_str.c.
     CVE-2012-0066     Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service     (application crash) via a long packet in a (1) Accellent 5Views (aka .5vw) file, (2) I4B trace file, or     (3) NETMON 2 capture file.
     CVE-2012-0067     wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause     a denial of service (application crash) via a long packet in an AIX iptrace file.
     CVE-2012-4285     The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x     before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of     service (divide-by-zero error and application crash) via a zero-length message.
     CVE-2012-4289     epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10,     and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via     a large number of ACL entries.
     CVE-2012-4290 The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before     1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed     packet.
     CVE-2012-4291 The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before     1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
    Fixed bugs:

     Fixed the parsing of link-local IPv6 addresses and Wireshark can prepare capture filter to omit SSH     packets over a link-local IPv6 connection.
     Wireshark's column editing does not brak column names any longer.
     TShark now properly analyzes the exit code of Dumpcap and propagates it correctly.
     The TShark -s (snapshot length) has been fixed: it now works fine with sizes lower that 68 bytes.
    Enhancement:
     Added support for the NetDump protocol was added.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The installed version of Wireshark is 1.8.x before 1.8.2.  This version is affected by the following vulnerabilities :

  - The 'DCP ETSI' dissector and 'pcap-ng' parser can     attempt a divide by zero operation leading to an     application crash. (CVE-2012-4285, CVE-2012-4286)

  - The 'MongoDB', 'XTP', 'AFP', and 'CTDB' dissectors can     be caused to large or infinite loops. (CVE-2012-4287,     CVE-2012-4288, CVE-2012-4289, CVE-2012-4290)

  - The 'CIP' dissector can be caused to exhaust system     memory. (CVE-2012-4291)

  - The 'STUN' dissector can be caused to crash.
    (CVE-2012-4292)

  - The 'EtherCAT Mailbox' dissector can be caused to     abort. (CVE-2012-4293)

  - A buffer overflow exists related to the 'ERF', 'RTPS2'     and 'GSM RLC MAC' dissectors. (CVE-2012-4294,     CVE-2012-4295, CVE-2012-4296, CVE-2012-4297)

  - A file parsing error related to 'Ixia IxVeriWave'     processing can allow a buffer overflow. (CVE-2012-4298)

wireshark was updated to 1.4.15 to fix multiple security issues.

Issues fixed :

  - fix bnc#776038(CVE-2012-4285 / CVE-2012-4288 /     CVE-2012-4289 / CVE-2012-4296 / CVE-2012-4291 /     CVE-2012-4292 / CVE-2012-4293 / CVE-2012-4290),     bnc#772738 (CVE-2012-4048 / CVE-2012-4049)(fixed     upstream)

  - Security fixes :

  - wnpa-sec-2012-13 The DCP ETSI dissector could trigger a     zero division. Reported by Laurent Butti. (Bug 7566)

  - wnpa-sec-2012-15 The XTP dissector could go into an     infinite loop. Reported by Ben Schmidt. (Bug 7571)

  - wnpa-sec-2012-17 The AFP dissector could go into a large     loop. Reported by Stefan Cornelius. (Bug 7603)

  - wnpa-sec-2012-18 The RTPS2 dissector could overflow a     buffer. Reported by Laurent Butti. (Bug 7568)

  - wnpa-sec-2012-20 The CIP dissector could exhaust system     memory. Reported y Ben Schmidt. (Bug 7570)

  - wnpa-sec-2012-21 The STUN dissector could crash.
    Reported by Laurent Butti. (Bug 7569)

  - wnpa-sec-2012-22 The EtherCAT Mailbox dissector could     abort. Reported by Laurent Butti. (Bug 7562)

  - wnpa-sec-2012-23 The CTDB dissector could go into a     large loop. Reported by Ben Schmidt. (Bug 7573)

  - Bug fixes :

  - Wireshark crashes on opening very short NFS pcap file.
    (Bug 7498)

  - Updated Protocol Support

  - AFP, Bluetooth L2CAP, CIP, CTDB, DCP ETSI, EtherCAT     Mailbox, FC Link Control LISP, NFS, RTPS2, SCTP, STUN,     XTP

Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2013-3559 , CVE-2013-4083)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2012-2392 , CVE-2012-3825 , CVE-2012-4285 , CVE-2012-4288 , CVE-2012-4289 , CVE-2012-4290 , CVE-2012-4291 , CVE-2012-4292 , CVE-2012-5595 , CVE-2012-5597 , CVE-2012-5598 , CVE-2012-5599 , CVE-2012-5600 , CVE-2012-6056 , CVE-2012-6059 , CVE-2012-6060 , CVE-2012-6061 , CVE-2012-6062 , CVE-2013-3557 , CVE-2013-3561 , CVE-2013-4081 , CVE-2013-4927 , CVE-2013-4931 , CVE-2013-4932 , CVE-2013-4933 , CVE-2013-4934 , CVE-2013-4935 , CVE-2013-4936 , CVE-2013-5721)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
288992	MiracleLinux 3 : wireshark-1.0.15-5.0.1.AXS3 (AXSA:2013-33:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
61573	Wireshark 1.8.x < 1.8.2 Multiple Vulnerabilities	Nessus	Windows	2012/8/17	2026/3/30	high
64231	SuSE 11.2 Security Update : wireshark (SAT Patch Number 6760)	Nessus	SuSE Local Security Checks	2013/1/25	2021/1/19	low
71268	Amazon Linux AMI : wireshark (ALAS-2013-251)	Nessus	Amazon Linux Local Security Checks	2013/12/10	2019/7/10	high

检测

插件搜索

high

high

low

high