In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-btl2cap.c by avoiding use of a seven-byte memcmp for potentially shorter strings.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.1 advisory.

  - In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture     file. This was addressed in epan/dissectors/CMakeLists.txt by registering this dissector. (CVE-2016-7958)

  - In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a     malformed capture file. This was addressed in epan/dissectors/packet-btl2cap.c by avoiding use of a seven-     byte memcmp for potentially shorter strings. (CVE-2016-7957)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a     malformed capture file. This was addressed in epan/dissectors/packet-btl2cap.c by avoiding use of a seven-     byte memcmp for potentially shorter strings. (CVE-2016-7957)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture
    file. This was addressed in epan/dissectors/CMakeLists.txt by registering this dissector. (CVE-2016-7958)

  - In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a
    malformed capture file. This was addressed in epan/dissectors/packet-btl2cap.c by avoiding use of a seven-
    byte memcmp for potentially shorter strings. (CVE-2016-7957)

  - In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network
    traffic or a capture file. This was addressed in plugins/profinet/packet-pn-rtc-one.c by rejecting input
    with too many I/O objects. (CVE-2016-9372)

  - In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free,
    triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c
    and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings.
    (CVE-2016-9373)

The version of Wireshark installed on the remote Windows host is prior to 2.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.1 advisory.

  - In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture     file. This was addressed in epan/dissectors/CMakeLists.txt by registering this dissector. (CVE-2016-7958)

  - In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a     malformed capture file. This was addressed in epan/dissectors/packet-btl2cap.c by avoiding use of a seven-     byte memcmp for potentially shorter strings. (CVE-2016-7957)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
311430	Wireshark 2.2.x < 2.2.1 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	Local	high
219915	Linux Distros Unpatched Vulnerability : CVE-2016-7957	Nessus	Misc.	Local	high
400919	Alpine: tshark, multiple wireshark packages: security update to 2.2.0-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
400919	Alpine: tshark, multiple wireshark packages: security update to 2.2.0-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
93940	Wireshark 2.2.x < 2.2.1 Multiple Vulnerabilities	Nessus	Windows	Local	high

Detections

Analytics

CVE-2016-7957

high

Tenable Plugins

high

high

high

high

high