Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6056. Reason: This candidate is a reservation duplicate of CVE-2012-6056. Notes: All CVE users should reference CVE-2012-6056 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

This update to 1.8.4 fixes the following issues :

  - Wireshark could leak potentially sensitive host name     resolution information when working with multiple     pcap-ng files. (wnpa-sec-2012-30, CVE-2012-5592 )

  - The USB dissector could go into an infinite loop.
    (wnpa-sec-2012-31, CVE-2012-5593 )

  - The sFlow dissector could go into an infinite loop.
    (npa-sec-2012-32, CVE-2012-5594 )

  - The SCTP dissector could go into an infinite loop.
    (wnpa-sec-2012-33, CVE-2012-5595 )

  - The EIGRP dissector could go into an infinite loop.
    (wnpa-sec-2012-34, CVE-2012-5596 )

  - The ISAKMP dissector could crash. (wnpa-sec-2012-35,     CVE-2012-5597 )

  - The iSCSI dissector could go into an infinite loop.
    (wnpa-sec-2012-36, CVE-2012-5598 )

  - The WTP dissector could go into an infinite loop.
    (wnpa-sec-2012-37, CVE-2012-5599 )

  - The RTCP dissector could go into an infinite loop.
    (wnpa-sec-2012-38, CVE-2012-5600 )

  - The 3GPP2 A11 dissector could go into an infinite loop.
    (wnpa-sec-2012-39, CVE-2012-5601 )

  - The ICMPv6 dissector could go into an infinite loop.
    (wnpa-sec-2012-40, CVE-2012-5602 )

Further bug fixes and updated protocol support as listed at http://www.wireshark.org/docs/relnotes/wireshark-1.8.4.html

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0341 advisory.

    Wireshark is a network protocol analyzer. It is used to capture and browse     the traffic running on a computer network.

    Multiple flaws were found in Wireshark. If Wireshark read a malformed     packet off a network or opened a malicious dump file, it could crash or,     possibly, execute arbitrary code as the user running Wireshark.
    (CVE-2013-3559, CVE-2013-4083, CVE-2014-2281, CVE-2014-2299)

    Several denial of service flaws were found in Wireshark. Wireshark could     crash or stop responding if it read a malformed packet off a network, or     opened a malicious dump file. (CVE-2012-5595, CVE-2012-5598, CVE-2012-5599,     CVE-2012-5600, CVE-2012-6056, CVE-2012-6060, CVE-2012-6061, CVE-2012-6062,     CVE-2013-3557, CVE-2013-4081, CVE-2013-4927, CVE-2013-4931, CVE-2013-4932,     CVE-2013-4933, CVE-2013-4934, CVE-2013-4935, CVE-2013-5721, CVE-2013-7112)

    All Wireshark users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues. All running instances     of Wireshark must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0341 advisory.

    [1.0.15-6.0.1.el5]
    - Added oracle-ocfs2-network.patch
    - increase max packet size to 65536 (Herbert van den Bergh) [orabug 13542633]

    [1.0.15-6]
    - security patches
    - Resolves: CVE-2012-6056                 CVE-2012-6060                 CVE-2012-6061                 CVE-2012-6062                 CVE-2013-3557                 CVE-2013-3559                 CVE-2013-4081                 CVE-2013-4083                 CVE-2013-4927                 CVE-2013-4931                 CVE-2013-4932                 CVE-2013-4933                 CVE-2013-4934                 CVE-2013-4935                 CVE-2013-5721                 CVE-2013-7112                 CVE-2014-2281                 CVE-2014-2299

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1569 advisory.

    - Resolves: CVE-2013-4927                 CVE-2013-4931                 CVE-2013-4932                 CVE-2013-4933                 CVE-2013-4934                 CVE-2013-4935                 CVE-2013-3557

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
83573	SUSE SLED11 / SLES11 Security Update : wireshark (SUSE-SU-2013:0238-1)	Nessus	SuSE Local Security Checks	medium
73281	RHEL 5 : wireshark (RHSA-2014:0341)	Nessus	Red Hat Local Security Checks	high
73279	Oracle Linux 5 : wireshark (ELSA-2014-0341)	Nessus	Oracle Linux Local Security Checks	high
71105	Oracle Linux 6 : wireshark (ELSA-2013-1569)	Nessus	Oracle Linux Local Security Checks	high

Detections

Analytics

CVE-2012-5595

No Score

Tenable Plugins

medium

high

high

high