Detections
Analytics
Alpine: multiple wireshark packages, tshark: security update to 4.0.15-r0
high Tenable Self-Hosted Container Security Plugin ID 408414
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- Memory handling issue in editcap could cause denial of service via crafted capture file (CVE-2024-4853)
- MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to
3.6.22 allow denial of service via packet injection or crafted capture file (CVE-2024-4854)
- Use after free issue in editcap could cause denial of service via crafted capture file (CVE-2024-4855)
See Also
https://security.alpinelinux.org/vuln/CVE-2024-4853
Plugin Details
Severity: High
ID: 408414
Version: Revision 1.10
Type: Local
Published: 5/20/2024
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.18
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS Score Source: CVE-2024-4854
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 5/14/2024
Reference Information
CVE: CVE-2024-4853, CVE-2024-4854, CVE-2024-4855
IAVB: 2024-B-0061-S