This script is Copyright (C) 2013-2016 Tenable Network Security, Inc.
The remote Mandriva Linux host is missing one or more security
Multiple vulnerabilities has been found and corrected in wireshark :
Infinite and large loops in ANSI MAP, BACapp, Bluetooth HCI, IEEE
802.3, LTP, and R3 dissectors have been fixed. Discovered by Laurent
The DIAMETER dissector could try to allocate memory improperly and
Wireshark could crash on SPARC processors due to misaligned memory.
Discovered by Klaus Heckelmann
The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before
1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a
denial of service (invalid pointer dereference and application crash)
via a crafted packet, as demonstrated by a usbmon dump
epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x
before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows
remote attackers to cause a denial of service (loop and CPU
consumption) via a crafted packet (CVE-2012-4049).
The DCP ETSI dissector could trigger a zero division (CVE-2012-4285).
The XTP dissector could go into an infinite loop (CVE-2012-4288).
The AFP dissector could go into a large loop (CVE-2012-4289).
The RTPS2 dissector could overflow a buffer (CVE-2012-4296).
The GSM RLC MAC dissector could overflow a buffer (CVE-2012-4297).
The CIP dissector could exhaust system memory (CVE-2012-4291).
The STUN dissector could crash (CVE-2012-4292).
The EtherCAT Mailbox dissector could abort (CVE-2012-4293).
The CTDB dissector could go into a large loop (CVE-2012-4290).
Martin Wilck discovered an infinite loop in the DRDA dissector
The USB dissector could go into an infinite loop. (wnpa-sec-2012-31)
The ISAKMP dissector could crash. (wnpa-sec-2012-35)
The iSCSI dissector could go into an infinite loop. (wnpa-sec-2012-36)
The WTP dissector could go into an infinite loop. (wnpa-sec-2012-37)
The RTCP dissector could go into an infinite loop. (wnpa-sec-2012-38)
The ICMPv6 dissector could go into an infinite loop.
Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS
CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP
The CLNP dissector could crash (wnpa-sec-2013-02).
The DTN dissector could crash (wnpa-sec-2013-03).
The MS-MMC dissector (and possibly others) could crash
The DTLS dissector could crash (wnpa-sec-2013-05).
The DCP-ETSI dissector could corrupt memory (wnpa-sec-2013-07).
The Wireshark dissection engine could crash (wnpa-sec-2013-08).
The NTLMSSP dissector could overflow a buffer (wnpa-sec-2013-09).
The sFlow dissector could go into an infinite loop (CVE-2012-6054).
The SCTP dissector could go into an infinite loop (CVE-2012-6056).
The MS-MMS dissector could crash (CVE-2013-2478).
The RTPS and RTPS2 dissectors could crash (CVE-2013-2480).
The Mount dissector could crash (CVE-2013-2481).
The AMPQ dissector could go into an infinite loop (CVE-2013-2482).
The ACN dissector could attempt to divide by zero (CVE-2013-2483).
The CIMD dissector could crash (CVE-2013-2484).
The FCSP dissector could go into an infinite loop (CVE-2013-2485).
The DTLS dissector could crash (CVE-2013-2488).
This advisory provides the latest version of Wireshark (1.6.14) which
is not vulnerable to these issues.
Update the affected packages.
Risk factor :
High / CVSS Base Score : 8.3
CVSS Temporal Score : 6.5
Public Exploit Available : true
Family: Mandriva Local Security Checks
Nessus Plugin ID: 66069 ()
CVE ID: CVE-2012-2392
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now