In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box function in epan/dissectors/file-mp4.c.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the     dissect_mp4_box function in epan/dissectors/file-mp4.c. (CVE-2017-9616)

Note that Nessus relies on the presence of the package as reported by the vendor.

Removing dependency on wireshark metapackage from wireshark-cli

----

Added wireshark-qt to wireshark metapackage

----

  - New version 2.4.5

  - Contains fixes for CVE-2018-7419, CVE-2018-7418,     CVE-2018-7417, CVE-2018-7420, CVE-2018-7320,     CVE-2018-7336, CVE-2018-7337, CVE-2018-7334,     CVE-2018-7335, CVE-2018-6836, CVE-2018-5335,     CVE-2018-5334, CVE-2017-6014, CVE-2017-9616,     CVE-2017-9617, CVE-2017-9766

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Wireshark installed on the remote Windows host is 2.2.x prior to 2.2.14 or 2.4.x prior to 2.4.6. It is, therefore, affected by multiple vulnerabilities.

The version of Wireshark installed on the remote MacOS/MacOSX host is 2.2.x prior to 2.2.14 or 2.4.x prior to 2.4.6. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Severity
221250	Linux Distros Unpatched Vulnerability : CVE-2017-9616	Nessus	Misc.	medium
120757	Fedora 28 : 1:wireshark (2018-bfdad62cd6)	Nessus	Fedora Local Security Checks	critical
108885	Wireshark 2.2.x < 2.2.14 / 2.4.x < 2.4.6 Multiple Vulnerabilities	Nessus	Windows	high
108884	Wireshark 2.2.x < 2.2.14 / 2.4.x < 2.4.6 Multiple Vulnerabilities (MacOS)	Nessus	MacOS X Local Security Checks	high
108674	Fedora 27 : 1:wireshark (2018-cdf3f8e8b0)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2017-9616

medium

Tenable Plugins

medium

critical

high

high

critical