The installed version of Wireshark 1.8 is earlier than 1.8.5.  It is, therefore, affected by the following vulnerabilities :

  - Errors exist related to the Bluetooth HCI, CSN.1,     DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols,     MPLS, R3, RTPS, SDP, and SIP dissectors that could     allow the application to enter infinite or large loops,     thereby consuming excessive CPU resources. (Bugs 8036,     8037, 8038, 8040, 8041, 8042, 8043, 8198, 8199, 8222)

  - Errors exist related to the DCP-ETSI, ROHC, DTLS,     MS-MMC, DTN, CLNP dissectors that could allow them to     crash. (Bugs 7679, 7871, 7945, 8111, 8112, 8213)

  - An unspecified error could allow the dissection engine     to crash. (Bug 8197)

  - An unspecified buffer overflow exists in the NTLMSSP     dissector that has an unspecified impact.

Wireshark has been updated to 1.6.13 which fixes bugs and security issues :

The following vulnerabilities have been fixed :

  - Infinite and large loops in the Bluetooth HCI, CSN.1,     DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols,     MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01     CVE-2013-1572 / CVE-2013-1573 / CVE-2013-1574 /     CVE-2013-1575 / CVE-2013-1576 / CVE-2013-1577 /     CVE-2013-1578 / CVE-2013-1579 / CVE-2013-1580 /     CVE-2013-1581

  - The CLNP dissector could crash wnpa-sec-2013-02     CVE-2013-1582

  - The DTN dissector could crash wnpa-sec-2013-03     CVE-2013-1583 / CVE-2013-1584

  - The MS-MMC dissector (and possibly others) could crash     wnpa-sec-2013-04 CVE-2013-1585

  - The DTLS dissector could crash wnpa-sec-2013-05     CVE-2013-1586

  - The DCP-ETSI dissector could corrupt memory     wnpa-sec-2013-07 CVE-2013-1588: * The Wireshark     dissection engine could crash wnpa-sec-2013-08     CVE-2013-1589: * The NTLMSSP dissector could overflow a     buffer wnpa-sec-2013-09 CVE-2013-1590: Further bug fixes     and updated protocol support as listed in :

http://www.wireshark.org/docs/relnotes/wireshark-1.6.13.html

The version of Wireshark installed on the remote Windows host is prior to 1.6.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.13 advisory.

  - Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows     remote attackers to cause a denial of service (application crash) via a malformed packet. (CVE-2013-1590)

  - The dissect_oampdu_event_notification function in epan/dissectors/packet-slowprotocols.c in the IEEE 802.3     Slow Protocols dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle     certain short lengths, which allows remote attackers to cause a denial of service (infinite loop) via a     malformed packet. (CVE-2013-1572)

  - The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x     before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows     remote attackers to cause a denial of service (infinite loop) via a malformed packet. (CVE-2013-1573)

  - The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI     dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a     counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a     malformed packet. (CVE-2013-1574)

  - The dissect_r3_cmd_alarmconfigure function in epan/dissectors/packet-assa_r3.c in the R3 dissector in     Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length,     which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    (CVE-2013-1575)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

wireshark was updated to 1.8.5 to fix bugs and security issues.

Vulnerabilities fixed :

  - Infinite and large loops in the Bluetooth HCI, CSN.1,     DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols,     MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01     CVE-2013-1572 CVE-2013-1573 CVE-2013-1574 CVE-2013-1575     CVE-2013-1576 CVE-2013-1577 CVE-2013-1578 CVE-2013-1579     CVE-2013-1580 CVE-2013-1581

  - The CLNP dissector could crash wnpa-sec-2013-02     CVE-2013-1582

  - The DTN dissector could crash wnpa-sec-2013-03     CVE-2013-1583 CVE-2013-1584

  - The MS-MMC dissector (and possibly others) could crash     wnpa-sec-2013-04 CVE-2013-1585

  - The DTLS dissector could crash wnpa-sec-2013-05     CVE-2013-1586

  - The ROHC dissector could crash wnpa-sec-2013-06     CVE-2013-1587

  - The DCP-ETSI dissector could corrupt memory     wnpa-sec-2013-07 CVE-2013-1588

  - The Wireshark dissection engine could crash     wnpa-sec-2013-08 CVE-2013-1589

  - The NTLMSSP dissector could overflow a buffer     wnpa-sec-2013-09 CVE-2013-1590

  + Further bug fixes and updated protocol support as listed     in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.5.h     tml

Multiple vulnerabilities were discovered in the dissectors/parsers for PKTC, IAX2, GSM CBCH and NCP which could result in denial of service.

This update also fixes many older less important issues by updating the package to the version found in Debian 8 also known as Jessie.

For Debian 7 'Wheezy', these problems have been fixed in version 1.12.1+g01b65bf-4+deb8u6~deb7u1.

We recommend that you upgrade your wireshark packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

wireshark was updated to 1.8.5 (bnc#801131), fixing bugs and security issues :

The following vulnerabilities have been fixed :

  - Infinite and large loops in the Bluetooth HCI, CSN.1,     DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols,     MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01     CVE-2013-1572 / CVE-2013-1573 / CVE-2013-1574 /     CVE-2013-1575 / CVE-2013-1576 / CVE-2013-1577 /     CVE-2013-1578 / CVE-2013-1579 / CVE-2013-1580 /     CVE-2013-1581

  - The CLNP dissector could crash wnpa-sec-2013-02.
    (CVE-2013-1582)

  - The DTN dissector could crash wnpa-sec-2013-03.
    (CVE-2013-1583 / CVE-2013-1584)

  - The MS-MMC dissector (and possibly others) could crash     wnpa-sec-2013-04. (CVE-2013-1585)

  - The DTLS dissector could crash wnpa-sec-2013-05.
    (CVE-2013-1586)

  - The ROHC dissector could crash wnpa-sec-2013-06.
    (CVE-2013-1587)

  - The DCP-ETSI dissector could corrupt memory     wnpa-sec-2013-07. (CVE-2013-1588)

  - The Wireshark dissection engine could crash     wnpa-sec-2013-08. (CVE-2013-1589)

  - The NTLMSSP dissector could overflow a buffer     wnpa-sec-2013-09 CVE-2013-1590: Further bug fixes and     updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.5.h     tml

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.13 advisory.

  - Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows     remote attackers to cause a denial of service (application crash) via a malformed packet. (CVE-2013-1590)

  - The dissect_oampdu_event_notification function in epan/dissectors/packet-slowprotocols.c in the IEEE 802.3     Slow Protocols dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle     certain short lengths, which allows remote attackers to cause a denial of service (infinite loop) via a     malformed packet. (CVE-2013-1572)

  - The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x     before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows     remote attackers to cause a denial of service (infinite loop) via a malformed packet. (CVE-2013-1573)

  - The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI     dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a     counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a     malformed packet. (CVE-2013-1574)

  - The dissect_r3_cmd_alarmconfigure function in epan/dissectors/packet-assa_r3.c in the R3 dissector in     Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length,     which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    (CVE-2013-1575)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
64362	Wireshark 1.8.x < 1.8.5 Multiple Vulnerabilities	Nessus	Windows	1/30/2013	3/30/2026	low
64797	SuSE 10 Security Update : wireshark (ZYPP Patch Number 8467)	Nessus	SuSE Local Security Checks	2/22/2013	1/19/2021	low
64361	Wireshark 1.6.x < 1.6.13 Multiple Vulnerabilities	Nessus	Windows	1/30/2013	10/7/2026	high
74879	openSUSE Security Update : wireshark (openSUSE-SU-2013:0276-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	low
91395	Debian DLA-497-1 : wireshark security update	Nessus	Debian Local Security Checks	6/1/2016	1/11/2021	medium
64795	SuSE 11.2 Security Update : wireshark (SAT Patch Number 7317)	Nessus	SuSE Local Security Checks	2/22/2013	1/19/2021	low
64796	SuSE 11.2 Security Update : wireshark (SAT Patch Number 7317)	Nessus	SuSE Local Security Checks	2/22/2013	1/19/2021	low
363835	Wireshark 1.6.x < 1.6.13 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	10/7/2026	10/7/2026	high

Detections

Analytics

Plugins Search

low

low

high

low

medium

low

low

high