Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.

An update of the wireshark package has been released.

The version of wireshark installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2906 advisory.

  - Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark     versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.
    (CVE-2023-2906)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0345 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-0666:
    Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version     4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution     in the context of the process running Wireshark.

    CVE-2023-0668:
    Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark     version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code     execution in the context of the process running Wireshark.

    CVE-2023-2854:
    BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted     capture file

    CVE-2023-2855:
    Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     crafted capture file

    CVE-2023-2856:
    VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service     via crafted capture file

    CVE-2023-2857:
    BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted     capture file

    CVE-2023-2858:
    NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     crafted capture file

    CVE-2023-2879:
    GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet     injection or crafted capture file

    CVE-2023-2906:
    Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark     versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.

    CVE-2023-2952:
    XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     packet injection or crafted capture file

    CVE-2023-3648:
    Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet     injection or crafted capture file

    CVE-2023-3649:
    iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted     capture file

    CVE-2023-4511:
    BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service     via packet injection or crafted capture file

    CVE-2023-4512:
    CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted     capture file

    CVE-2023-4513:
    BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via     packet injection or crafted capture file

    CVE-2023-5371:
    RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via     packet injection or crafted capture file

    CVE-2023-0667:
    Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version     4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly     code execution in the context of the process running Wireshark

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark     versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.
    (CVE-2023-2906)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3906 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3906-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     September 30, 2024                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : wireshark     Version        : 3.4.16-0+deb11u1     CVE ID         : CVE-2021-4181 CVE-2021-4182 CVE-2021-4184 CVE-2021-4185                      CVE-2021-4186 CVE-2021-4190 CVE-2022-0581 CVE-2022-0582                      CVE-2022-0583 CVE-2022-0585 CVE-2022-0586 CVE-2022-3190                      CVE-2022-4344 CVE-2022-4345 CVE-2023-0411 CVE-2023-0412                      CVE-2023-0413 CVE-2023-0415 CVE-2023-0416 CVE-2023-0417                      CVE-2023-0666 CVE-2023-0667 CVE-2023-0668 CVE-2023-1161                      CVE-2023-1992 CVE-2023-1993 CVE-2023-1994 CVE-2023-2855                      CVE-2023-2856 CVE-2023-2858 CVE-2023-2879 CVE-2023-2906                      CVE-2023-2952 CVE-2023-3648 CVE-2023-3649 CVE-2023-4511                      CVE-2023-4512 CVE-2023-4513 CVE-2023-6175 CVE-2024-0208                      CVE-2024-0209 CVE-2024-0211 CVE-2024-2955 CVE-2024-4853                      CVE-2024-4854 CVE-2024-8250 CVE-2024-8645     Debian Bug     : 1033756 1034721 1041101 1059925 1068111 1080298

    Multiple vulnerabilities have been fixed in the network traffic analyzer     Wireshark.

    CVE-2021-4181

        Sysdig Event dissector crash

    CVE-2021-4182

        RFC 7468 dissector crash

    CVE-2021-4184

        BitTorrent DHT dissector infinite loop

    CVE-2021-4185

        RTMPT dissector infinite loop

    CVE-2021-4186

        Gryphon dissector crash

    CVE-2021-4190

        Kafka dissector large loop DoS

    CVE-2022-0581

        CMS protocol dissector crash

    CVE-2022-0582

        CSN.1 protocol dissector unaligned access

    CVE-2022-0583

        PVFS protocol dissector crash

    CVE-2022-0585

        Large loops in multiple dissectors

    CVE-2022-0586

        RTMPT protocol dissector infinite loop

    CVE-2022-3190

        F5 Ethernet Trailer dissector infinite loop

    CVE-2022-4344

        Kafka protocol dissector memory exhaustion

    CVE-2022-4345

        Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors

    CVE-2023-0411

        Excessive loops in the BPv6, NCP and RTPS protocol dissectors

    CVE-2023-0412

        TIPC dissector crash

    CVE-2023-0413

        Dissection engine bug DoS

    CVE-2023-0415

        iSCSI dissector crash

    CVE-2023-0416

        GNW dissector crash

    CVE-2023-0417

        NFS dissector memory leak

    CVE-2023-0666

        RTPS parsing heap overflow

    CVE-2023-0667

        MSMMS dissector buffer overflow

    CVE-2023-0668

        IEEE C37.118 Synchrophasor dissector crash

    CVE-2023-1161

        ISO 15765 dissector crash

    CVE-2023-1992

        RPCoRDMA dissector crash

    CVE-2023-1993

        LISP dissector large loop

    CVE-2023-1994

        GQUIC dissector crash

    CVE-2023-2855

        Candump log parser crash

    CVE-2023-2856

        VMS TCPIPtrace file parser crash

    CVE-2023-2858

        NetScaler file parser crash

    CVE-2023-2879

        GDSDB dissector infinite loop

    CVE-2023-2906

        CP2179 dissector crash

    CVE-2023-2952

        XRA dissector infinite loop

    CVE-2023-3648

        Kafka dissector crash

    CVE-2023-3649

        iSCSI dissector crash

    CVE-2023-4511

        BT SDP dissector infinite loop

    CVE-2023-4512

        CBOR dissector crash

    CVE-2023-4513

        BT SDP dissector memory leak

    CVE-2023-6175

        NetScreen file parser crash

    CVE-2024-0208

        GVCP dissector crash

    CVE-2024-0209

        IEEE 1609.2 dissector crash

    CVE-2024-0211

        DOCSIS dissector crash

    CVE-2024-2955

        T.38 dissector crash

    CVE-2024-4853

        Editcap byte chopping crash

    CVE-2024-4854

        MONGO dissector infinite loop

    CVE-2024-8250

        NTLMSSP dissector crash

    CVE-2024-8645

        SPRT dissector crash

    For Debian 11 bullseye, these problems have been fixed in version     3.4.16-0+deb11u1.

    We recommend that you upgrade your wireshark packages.

    For the detailed security status of wireshark please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/wireshark

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-b57a9be8a8 advisory.

    New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of wireshark installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2906 advisory.

  - Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark     versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.
    (CVE-2023-2906)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3778-1 advisory.

    - Wireshark update to v3.6.16.
    - CVE-2023-4512: Fixed a bug in CBOR dissector which could lead to crash. (bsc#1214561)
    - CVE-2023-4511: Fixed a bug in BT SDP dissector which could lead to an infinite loop. (bsc#1214560)
    - CVE-2023-4513: Fixed a bug in BT SDP dissector which could lead to a memory leak. (bsc#1214562)
    - CVE-2023-2906: Fixed a bug in CP2179 dissector which could lead to crash. (bsc#1214652)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-348 advisory.

    Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark     versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.
    (CVE-2023-2906)

    BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service     via packet injection or crafted capture file (CVE-2023-4511)

    CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted     capture file (CVE-2023-4512)

    BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via     packet injection or crafted capture file (CVE-2023-4513)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-abc9ca1e7e advisory.

    New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-920a3ab4ee advisory.

    New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.8 advisory.

  - Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in     the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of     service (application crash) via a malformed packet. (CVE-2013-3562)

  - In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop.
    This was addressed in epan/dissectors/packet-slsk.c by making loop bounds more explicit. (CVE-2017-9346)

  - In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial     of service (stack exhaustion) in the dissect_IODWriteReq function in plugins/profinet/packet-dcerpc-pn-     io.c. (CVE-2017-9766)

  - In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in     epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth.
    (CVE-2018-9262)

  - Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17     allows denial of service via packet injection or crafted capture file (CVE-2021-39929)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.8 advisory.

  - Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in     the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of     service (application crash) via a malformed packet. (CVE-2013-3562)

  - In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop.
    This was addressed in epan/dissectors/packet-slsk.c by making loop bounds more explicit. (CVE-2017-9346)

  - In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial     of service (stack exhaustion) in the dissect_IODWriteReq function in plugins/profinet/packet-dcerpc-pn-     io.c. (CVE-2017-9766)

  - In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in     epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth.
    (CVE-2018-9262)

  - Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17     allows denial of service via packet injection or crafted capture file (CVE-2021-39929)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
332339	Photon OS 5.0: Wireshark PHSA-2023-5.0-91-0090	Nessus	PhotonOS Local Security Checks	Local	high
241948	Azure Linux 3.0 Security Update: wireshark (CVE-2023-2906)	Nessus	Azure Linux Local Security Checks	Local	medium
239766	TencentOS Server 4: wireshark (TSSA-2024:0345)	Nessus	Tencent Local Security Checks	Local	high
226849	Linux Distros Unpatched Vulnerability : CVE-2023-2906	Nessus	Misc.	Local	medium
207910	Debian dla-3906 : libwireshark-data - security update	Nessus	Debian Local Security Checks	Local	critical
203808	Photon OS 3.0: Wireshark PHSA-2023-3.0-0644	Nessus	PhotonOS Local Security Checks	Local	high
203501	Photon OS 5.0: Wireshark PHSA-2023-5.0-0090	Nessus	PhotonOS Local Security Checks	Local	high
185262	Fedora 39 : wireshark (2023-b57a9be8a8)	Nessus	Fedora Local Security Checks	Local	high
182374	CBL Mariner 2.0 Security Update: wireshark (CVE-2023-2906)	Nessus	MarinerOS Local Security Checks	Local	medium
181914	SUSE SLED15: libwireshark15 / libwiretap12 / libwsutil13 / wireshark / etc (SUSE-SU-2023:3778-1)	Nessus	SuSE Local Security Checks	Local	high
181709	Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-348)	Nessus	Amazon Linux Local Security Checks	Local	high
181194	Fedora 38 : wireshark (2023-abc9ca1e7e)	Nessus	Fedora Local Security Checks	Local	high
181190	Fedora 37 : wireshark (2023-920a3ab4ee)	Nessus	Fedora Local Security Checks	Local	high
180102	Wireshark 4.0.x < 4.0.8 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	Local	high
180101	Wireshark 4.0.x < 4.0.8 Multiple Vulnerabilities	Nessus	Windows	Local	high

Detections

Analytics

CVE-2023-2906

medium

Tenable Plugins

high

medium

high

medium

critical

high

high

high

medium

high

high

high

high

high

high