The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.10 advisory.

  - Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark_application.cpp     in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to gain privileges     via a Trojan horse riched20.dll.dll file in the current working directory, related to use of QLibrary.
    (CVE-2016-2521)

  - The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark     1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service     (infinite loop) via a crafted packet. (CVE-2016-2523)

  - The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark     1.12.x before 1.12.10 and 2.0.x before 2.0.2 mishandles the case of an unrecognized TLV type, which allows     remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted     packet, a different vulnerability than CVE-2016-2531. (CVE-2016-2530)

  - Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10     and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and     application crash) via a crafted packet that triggers a 0xff tag value, a different vulnerability than     CVE-2016-2530. (CVE-2016-2531)

  - The dissect_llrp_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark     1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows remote     attackers to cause a denial of service (memory consumption or application crash) via a crafted packet.
    (CVE-2016-2532)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 1.12.x < 1.12.10 Multiple Vulnerabilities (macOS)

high Nessus Plugin ID 89101

Version 1.12

Version 1.11

Version 1.12 Oct 8, 2026, 2:26 AM CVE (set "CVE" coverage to "CVE-2016-2521,CVE-2016-2523,CVE-2016-2530,CVE-2016-2531,CVE-2016-2532,CVE-2016-4417,CVE-2016-4418,CVE-2016-4421") Detection (updated detection logic) Exploit attributes ("Exploit framework core" changed from "True" to none) Plugin metadata Plugin Feed: 202610080226
Version 1.11 Mar 30, 2026, 9:17 PM Logic Changes (modernized plugin) Plugin Feed: 202603302117