Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7. (CVE-2022-3274)

The version of Wireshark installed on the remote Windows host is prior to 3.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.9 advisory.

  - The OPUS dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet     onto the wire or by convincing someone to read a malformed packet trace file. (wireshark-bug-18378)

  - The USB-HID dissector could crash on Windows. It may be possible to make Wireshark crash by injecting a     malformed packet onto the wire or by convincing someone to read a malformed packet trace file. (wireshark-     bug-18384)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.9 advisory.

  - The OPUS dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet     onto the wire or by convincing someone to read a malformed packet trace file. (wireshark-bug-18378)

  - The USB-HID dissector could crash on Windows. It may be possible to make Wireshark crash by injecting a     malformed packet onto the wire or by convincing someone to read a malformed packet trace file. (wireshark-     bug-18384)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
415206	SCA: security update for rdiffweb (GHSA-gmj8-84r4-h46j)	Tenable Cloud Security	SCA Checks	Local	high
415206	SCA: security update for rdiffweb (GHSA-gmj8-84r4-h46j)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
166608	Wireshark 3.6.x < 3.6.9 Multiple Vulnerabilities	Nessus	Windows	Local	critical
166607	Wireshark 3.6.x < 3.6.9 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2022-3274

high

Tenable Plugins

high

high

critical

critical