The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.6 advisory.

  - XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     packet injection or crafted capture file (CVE-2023-2952)

  - Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version     4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution     in the context of the process running Wireshark. (CVE-2023-0666)

  - Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark     version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code     execution in the context of the process running Wireshark. (CVE-2023-0668)

  - BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted     capture file (CVE-2023-2854, CVE-2023-2857)

  - Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     crafted capture file (CVE-2023-2855)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 4.0.x < 4.0.6 Multiple Vulnerabilities (macOS)

high Nessus Plugin ID 176369

Version 1.9