The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.2.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.8 advisory.

  - In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust     system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validation.
    NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9350. (CVE-2017-11411)

  - In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system     memory. This was addressed in epan/dissectors/packet-opensafety.c by checking for a negative length.
    (CVE-2017-9350)

  - In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop,     triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-     wbxml.c by adding length validation. (CVE-2017-7702)

  - In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop,     triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-     wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: this vulnerability     exists because of an incomplete fix for CVE-2017-7702. (CVE-2017-11410)

  - In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in     epan/dissectors/packet-amqp.c by checking for successful list dissection. (CVE-2017-11408)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 2.2.x < 2.2.8 Multiple Vulnerabilities (macOS)

high Nessus Plugin ID 101897

Version 1.8

Version 1.7

Version 1.6

Version 1.8 May 1, 2026, 6:47 PM CVE (set "CVE" coverage to "CVE-2017-11406,CVE-2017-11407,CVE-2017-11408,CVE-2017-11410,CVE-2017-11411,CVE-2017-7702,CVE-2017-9350") CVSSv2 score source (changed from "CVE-2017-11409" to "CVE-2017-9350") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605011847
Version 1.7 Mar 30, 2026, 9:17 PM Logic Changes (modernized plugin) Plugin Feed: 202603302117
Version 1.6 Dec 10, 2025, 9:29 AM CVSSv2 score source (set to "CVE-2017-11409") Plugin Feed: 202512100929