The version of Wireshark installed on the remote Windows host is prior to 2.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.4.5 advisory.

  - In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash. This was addressed in     wiretap/pcapng.c by adding a block-size check for sysdig event blocks. (CVE-2018-7420)

  - In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash. This was addressed     in epan/crypt/airpdcap.c by rejecting lengths that are too small. (CVE-2018-7335)

  - In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was     addressed by not proceeding with dissection after encountering an unexpected type. (CVE-2018-7321)

  - In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite loop that     was addressed by checking for integer wraparound. (CVE-2018-7322)

  - In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was     addressed by ensuring that a calculated length was monotonically increasing. (CVE-2018-7323)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 2.4.x < 2.4.5 Multiple Vulnerabilities

high Nessus Plugin ID 107093

Version 1.7

Version 1.6

Version 1.5

Version 1.7 May 2, 2026, 7:35 AM CVE (set "CVE" coverage to "CVE-2018-7320,CVE-2018-7321,CVE-2018-7322,CVE-2018-7323,CVE-2018-7324,CVE-2018-7325,CVE-2018-7326,CVE-2018-7327,CVE-2018-7328,CVE-2018-7329,CVE-2018-7330,CVE-2018-7331,CVE-2018-7332,CVE-2018-7333,CVE-2018-7334,CVE-2018-7335,CVE-2018-7336,CVE-2018-7337,CVE-2018-7417,CVE-2018-7418,CVE-2018-7419,CVE-2018-7420") CVSSv2 score source (changed from "CVE-2018-7337" to "CVE-2018-7420") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605020735
Version 1.6 Mar 30, 2026, 9:17 PM Logic Changes (modernized plugin) Plugin Feed: 202603302117
Version 1.5 Oct 27, 2025, 11:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202510272356