The version of Wireshark installed on the remote Windows host is prior to 2.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.4 advisory.

  - epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the     packet-header data type, which allows remote attackers to cause a denial of service (application crash)     via a crafted packet. (CVE-2016-5358)

  - epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x     before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service     (infinite loop) via a crafted packet. (CVE-2016-5350)

  - epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4     mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service     (application crash) via a crafted packet. (CVE-2016-5351)

  - epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length     values, which allows remote attackers to cause a denial of service (application crash) via a crafted     packet. (CVE-2016-5352)

  - epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x     before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service     (application crash) via a crafted packet. (CVE-2016-5353)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 2.0.x < 2.0.4 Multiple Vulnerabilities

high Nessus Plugin ID 91821

Version 1.10

Version 1.9

Version 1.8

Version 1.10 May 2, 2026, 1:15 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605020115
Version 1.9 Mar 30, 2026, 9:17 PM Logic Changes (modernized plugin) Plugin Feed: 202603302117
Version 1.8 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354