epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.4 advisory.

  - wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to     execute arbitrary code or cause a denial of service (memory corruption and application crash) via a     crafted packet-trace file that includes a large packet. (CVE-2014-4174)

  - The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x     before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to     cause a denial of service (infinite loop) via a crafted packet. (CVE-2013-7112)

  - epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies     on a global variable, which allows remote attackers to cause a denial of service (application crash) via a     crafted packet. (CVE-2013-7113)

  - Multiple buffer overflows in the create_ntlmssp_v2_key function in epan/dissectors/packet-ntlmssp.c in the     NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 allow remote attackers to     cause a denial of service (application crash) via a long domain name in a packet. (CVE-2013-7114)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

- update to 1.10.5

  + bugs fixed :

  - Wireshark stops showing new packets but dumpcap keeps     writing them to the temp file.

  - Wireshark 1.10.4 shuts down when promiscuous mode is     unchecked.

  - Homeplug dissector bug: STATUS_ACCESS_VIOLATION:
    dissector accessed an invalid memory address.

  - update to 1.10.4 [bnc#855980]

  + vulnerabilities fixed :

  - The SIP dissector could go into an infinite loop.
    wnpa-sec-2013-66 CVE-2013-7112

  - The BSSGP dissector could crash. wnpa-sec-2013-67     CVE-2013-7113

  - The NTLMSSP v2 dissector could crash. Discovered by     Garming Sam. wnpa-sec-2013-68 CVE-2013-7114

  + Further bug fixes and updated protocol support as listed     in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.10.4     .html

- openSUSE 12.2 and 12.3: update to 1.8.12 [bnc#855980]

  + vulnerabilities fixed :

  - The SIP dissector could go into an infinite loop.
    wnpa-sec-2013-66 CVE-2013-7112

  - The NTLMSSP v2 dissector could crash. Discovered by     Garming Sam. wnpa-sec-2013-68 CVE-2013-7114

  + Further bug fixes and updated protocol support as listed     in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.8.12     .html

  - openSUSE 13.1: update to 1.10.4 [bnc#855980]

  + vulnerabilities fixed :

  - The SIP dissector could go into an infinite loop.
    wnpa-sec-2013-66 CVE-2013-7112

  - The BSSGP dissector could crash. wnpa-sec-2013-67     CVE-2013-7113

  - The NTLMSSP v2 dissector could crash. Discovered by     Garming Sam. wnpa-sec-2013-68 CVE-2013-7114

  + Further bug fixes and updated protocol support as listed     in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.10.4     .html

This update fixes a security problem in the BSSGP network protocol dissector that could crash wireshark.

wireshark was updated to security update version 1.8.12, fixing bugs and security issues.

  - The SIP dissector could go into an infinite loop.
    wnpa-sec-2013-66. (CVE-2013-7112)

  - The NTLMSSP v2 dissector could crash. Discovered by     Garming Sam. wnpa-sec-2013-68 (CVE-2013-7114) Further     bug fixes and updated protocol support as listed in :

https://www.wireshark.org/docs/relnotes/wireshark-1.8.12.html

Laurent Butti and Garming Sam discovered multiple vulnerabilities in the dissectors for NTLMSSPv2 and BSSGP, which could lead to denial of service or the execution of arbitrary code.

The version of Wireshark installed on the remote Windows host is prior to 1.10.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.4 advisory.

  - wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to     execute arbitrary code or cause a denial of service (memory corruption and application crash) via a     crafted packet-trace file that includes a large packet. (CVE-2014-4174)

  - The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x     before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to     cause a denial of service (infinite loop) via a crafted packet. (CVE-2013-7112)

  - epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies     on a global variable, which allows remote attackers to cause a denial of service (application crash) via a     crafted packet. (CVE-2013-7113)

  - Multiple buffer overflows in the create_ntlmssp_v2_key function in epan/dissectors/packet-ntlmssp.c in the     NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 allow remote attackers to     cause a denial of service (application crash) via a long domain name in a packet. (CVE-2013-7114)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
364288	Wireshark 1.10.x < 1.10.4 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	Local	high
75415	openSUSE Security Update : wireshark (openSUSE-SU-2014:0017-1)	Nessus	SuSE Local Security Checks	Local	medium
75377	openSUSE Security Update : wireshark (openSUSE-SU-2014:0013-1)	Nessus	SuSE Local Security Checks	Local	medium
73178	SuSE 11.3 Security Update : wireshark (SAT Patch Number 8977)	Nessus	SuSE Local Security Checks	Local	medium
72086	SuSE 11.2 / 11.3 Security Update : wireshark (SAT Patch Numbers 8708 / 8709)	Nessus	SuSE Local Security Checks	Local	medium
71585	Debian DSA-2825-1 : wireshark - several vulnerabilities	Nessus	Debian Local Security Checks	Local	medium
71521	Wireshark 1.10.x < 1.10.4 Multiple Vulnerabilities	Nessus	Windows	Local	high

Detections

Analytics

CVE-2013-7113

high

Tenable Plugins

high

medium

medium

medium

medium

medium

high