Detections
Analytics
Wireshark < 1.2.18 / 1.4.8 / 1.6.1 Multiple Denial of Service Vulnerabilities
medium Nessus Plugin ID 55510
Language:
Synopsis
The remote host has an application that is affected by multiple denial of service vulnerabilities.Description
The installed version of Wireshark is earlier than 1.2.18 / 1.4.8 / 1.6.1 and thus is potentially affected by multiple denial of service vulnerabilities:- An error in the Lucent / Ascend file parser can be exploited by specially crafted packets to cause high CPU usage. (CVE-2011-2597)
- An error in the 'elem_cell_id_list' function of the ANSI MAP dissector can be exploited by a specially crafted MAP packet to cause a denial of service condition. (Issue #6044)
Solution
Upgrade to Wireshark version 1.2.18 / 1.4.8 / 1.6.1 or later.See Also
https://www.wireshark.org/security/wnpa-sec-2011-09.html
Plugin Details
Severity: Medium
ID: 55510
File Name: wireshark_1_2_18.nasl
Version: 1.13
Type: local
Agent: windows
Family: Windows
Published: 7/5/2011
Updated: 3/9/2023
Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: cpe:/a:wireshark:wireshark
Required KB Items: SMB/Wireshark/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 6/29/2011
Vulnerability Publication Date: 5/31/2011
Reference Information
CVE: CVE-2011-2597, CVE-2011-2698
Secunia: 45086