The version of Wireshark installed on the remote Mac OS X host is 2.0.x prior to 2.0.6. It is, therefore, affected by multiple denial of service vulnerabilities :

  - A flaw exists in the QNX6 QNET dissector in the     dissect_qnet6_lr() function in packet-qnet6.c due to     improper handling of MAC address data. An     unauthenticated, remote attacker can exploit this, via a     crafted packet, to crash the program, resulting in a     denial of service. (CVE-2016-7175)

  - Multiple flaws exist in the H.225 dissector in     packet-h225.c due to improper handling of strings in     malformed packets. An unauthenticated, remote attacker     can exploit this, via a crafted packet, to crash the     program, resulting in a denial of service.
    (CVE-2016-7176)

  - An out-of-bounds read error exists in the Catapult     DCT2000 dissector in the attach_fp_info() function in     packet-catapult-dct2000.c due to a failure to restrict     the number of channels. An unauthenticated, remote     attacker can exploit this, via a crafted packet, to     crash the program, resulting in a denial of service.
    (CVE-2016-7177)

  - A NULL pointer dereference flaw exists in the UMTS FP     dissector in packet-umts_fp.c due to a failure to ensure     that memory is allocated for certain data structures. An     unauthenticated, remote attacker can exploit this, via a     crafted packet, to crash the program, resulting in a     denial of service. (CVE-2016-7178)

  - A stack-based buffer overflow condition exists in the     Catapult DCT2000 dissector in the parse_outhdr_string()     function in packet-catapult-dct2000.c due to improper     validation of specially crafted packets. An     unauthenticated, remote attacker can exploit this, via a     crafted packet, to crash the program, resulting in a     denial of service. (CVE-2016-7179)

  - A flaw exists in the IPMI Trace dissector in the     dissect_ipmi_trace() function in packet-ipmi-trace.c due     to a failure to properly consider whether a string is     constant. An unauthenticated, remote attacker can     exploit this, via a crafted packet, to crash the     program, resulting in a denial of service.
    (CVE-2016-7180)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 2.0.x < 2.0.6 Multiple DoS (Mac OS X)

medium Nessus Plugin ID 93517

Version 1.9

Version 1.8

Version 1.9 Mar 30, 2026, 9:17 PM Logic Changes (modernized plugin) Plugin Feed: 202603302117
Version 1.8 Jan 23, 2026, 3:45 PM CVSSv2 score source (set to "CVE-2016-7180") Plugin Feed: 202601231545