wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.4 advisory.

  - wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to     execute arbitrary code or cause a denial of service (memory corruption and application crash) via a     crafted packet-trace file that includes a large packet. (CVE-2014-4174)

  - The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x     before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to     cause a denial of service (infinite loop) via a crafted packet. (CVE-2013-7112)

  - epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies     on a global variable, which allows remote attackers to cause a denial of service (application crash) via a     crafted packet. (CVE-2013-7113)

  - Multiple buffer overflows in the create_ntlmssp_v2_key function in epan/dissectors/packet-ntlmssp.c in the     NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 allow remote attackers to     cause a denial of service (application crash) via a long domain name in a packet. (CVE-2013-7114)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201406-33 (Wireshark: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Wireshark. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker can cause arbitrary code execution or a Denial of       Service condition via a specially crafted packet.
  Workaround :

    There is no known workaround at this time.

The version of Wireshark installed on the remote Windows host is prior to 1.10.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.4 advisory.

  - wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to     execute arbitrary code or cause a denial of service (memory corruption and application crash) via a     crafted packet-trace file that includes a large packet. (CVE-2014-4174)

  - The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x     before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to     cause a denial of service (infinite loop) via a crafted packet. (CVE-2013-7112)

  - epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies     on a global variable, which allows remote attackers to cause a denial of service (application crash) via a     crafted packet. (CVE-2013-7113)

  - Multiple buffer overflows in the create_ntlmssp_v2_key function in epan/dissectors/packet-ntlmssp.c in the     NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 allow remote attackers to     cause a denial of service (application crash) via a long domain name in a packet. (CVE-2013-7114)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
364288	Wireshark 1.10.x < 1.10.4 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	Local	high
76304	GLSA-201406-33 : Wireshark: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
71521	Wireshark 1.10.x < 1.10.4 Multiple Vulnerabilities	Nessus	Windows	Local	high

Detections

Analytics

CVE-2014-4174

high

Tenable Plugins

high

high

high