wireshark was updated to 1.4.15 to fix multiple security issues.

Issues fixed :

  - fix bnc#776038(CVE-2012-4285 / CVE-2012-4288 /     CVE-2012-4289 / CVE-2012-4296 / CVE-2012-4291 /     CVE-2012-4292 / CVE-2012-4293 / CVE-2012-4290),     bnc#772738 (CVE-2012-4048 / CVE-2012-4049)(fixed     upstream)

  - Security fixes :

  - wnpa-sec-2012-13 The DCP ETSI dissector could trigger a     zero division. Reported by Laurent Butti. (Bug 7566)

  - wnpa-sec-2012-15 The XTP dissector could go into an     infinite loop. Reported by Ben Schmidt. (Bug 7571)

  - wnpa-sec-2012-17 The AFP dissector could go into a large     loop. Reported by Stefan Cornelius. (Bug 7603)

  - wnpa-sec-2012-18 The RTPS2 dissector could overflow a     buffer. Reported by Laurent Butti. (Bug 7568)

  - wnpa-sec-2012-20 The CIP dissector could exhaust system     memory. Reported y Ben Schmidt. (Bug 7570)

  - wnpa-sec-2012-21 The STUN dissector could crash.
    Reported by Laurent Butti. (Bug 7569)

  - wnpa-sec-2012-22 The EtherCAT Mailbox dissector could     abort. Reported by Laurent Butti. (Bug 7562)

  - wnpa-sec-2012-23 The CTDB dissector could go into a     large loop. Reported by Ben Schmidt. (Bug 7573)

  - Bug fixes :

  - Wireshark crashes on opening very short NFS pcap file.
    (Bug 7498)

  - Updated Protocol Support

  - AFP, Bluetooth L2CAP, CIP, CTDB, DCP ETSI, EtherCAT     Mailbox, FC Link Control LISP, NFS, RTPS2, SCTP, STUN,     XTP

The remote Solaris system is missing necessary patches to address security updates :

  - The dissect_pft function in     epan/dissectors/packet-dcp-etsi.c in the DCP ETSI     dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before     1.6.10, and 1.8.x before 1.8.2 allows remote attackers     to cause a denial of service (divide-by-zero error and     application crash) via a zero-length message.
    (CVE-2012-4285)

  - The pcapng_read_packet_block function in     wiretap/pcapng.c in the pcap-ng file parser in Wireshark     1.8.x before 1.8.2 allows user-assisted remote attackers     to cause a denial of service (divide-by-zero error and     application crash) via a crafted pcap-ng file.
    (CVE-2012-4286)

  - epan/dissectors/packet-mongo.c in the MongoDB dissector     in Wireshark 1.8.x before 1.8.2 allows remote attackers     to cause a denial of service (loop and CPU consumption)     via a small value for a BSON document length.
    (CVE-2012-4287)

  - Integer overflow in the dissect_xtp_ecntl function in     epan/dissectors/ packet-xtp.c in the XTP dissector in     Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and     1.8.x before 1.8.2 allows remote attackers to cause a     denial of service (loop or application crash) via a     large value for a span length. (CVE-2012-4288)

  - epan/dissectors/packet-afp.c in the AFP dissector in     Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and     1.8.x before 1.8.2 allows remote attackers to cause a     denial of service (loop and CPU consumption) via a large     number of ACL entries. (CVE-2012-4289)

  - The CTDB dissector in Wireshark 1.4.x before 1.4.15,     1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows     remote attackers to cause a denial of service (loop and     CPU consumption) via a malformed packet. (CVE-2012-4290)

  - The CIP dissector in Wireshark 1.4.x before 1.4.15,     1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows     remote attackers to cause a denial of service (memory     consumption) via a malformed packet. (CVE-2012-4291)

  - The dissect_stun_message function in     epan/dissectors/packet-stun.c in the STUN dissector in     Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and     1.8.x before 1.8.2 does not properly interact with     key-destruction behavior in a certain tree library,     which allows remote attackers to cause a denial of     service (application crash) via a malformed packet.
    (CVE-2012-4292)

  - plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox     dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before     1.6.10, and 1.8.x before 1.8.2 does not properly handle     certain integer fields, which allows remote attackers to     cause a denial of service (application exit) via a     malformed packet. (CVE-2012-4293)

  - Buffer overflow in the channelised_fill_sdh_g707_format     function in epan/ dissectors/packet-erf.c in the ERF     dissector in Wireshark 1.8.x before 1.8.2 allows remote     attackers to execute arbitrary code via a large speed     (aka rate) value. (CVE-2012-4294)

  - Array index error in the     channelised_fill_sdh_g707_format function in epan/     dissectors/packet-erf.c in the ERF dissector in     Wireshark 1.8.x before 1.8.2 might allow remote     attackers to cause a denial of service (application     crash) via a crafted speed (aka rate) value.
    (CVE-2012-4295)

  - Buffer overflow in epan/dissectors/packet-rtps2.c in the     RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x     before 1.6.10, and 1.8.x before 1.8.2 allows remote     attackers to cause a denial of service (CPU consumption)     via a malformed packet. (CVE-2012-4296)

  - Buffer overflow in the dissect_gsm_rlcmac_downlink     function in epan/dissectors/ packet-gsm_rlcmac.c in the     GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10     and 1.8.x before 1.8.2 allows remote attackers to     execute arbitrary code via a malformed packet.
    (CVE-2012-4297)

  - Integer signedness error in the     vwr_read_rec_data_ethernet function in wiretap/ vwr.c in     the Ixia IxVeriWave file parser in Wireshark 1.8.x     before 1.8.2 allows user-assisted remote attackers to     execute arbitrary code via a crafted packet-trace file     that triggers a buffer overflow. (CVE-2012-4298)

The version of Wireshark installed on the remote Windows host is prior to 1.8.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.2 advisory.

  - Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia     IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute     arbitrary code via a crafted packet-trace file that triggers a buffer overflow. (CVE-2012-4298)

  - Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the     GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to     execute arbitrary code via a malformed packet. (CVE-2012-4297)

  - The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x     before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of     service (divide-by-zero error and application crash) via a zero-length message. (CVE-2012-4285)

  - The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x     before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and     application crash) via a crafted pcap-ng file. (CVE-2012-4286)

  - epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote     attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document     length. (CVE-2012-4287)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple vulnerabilities has been found and corrected in wireshark :

Infinite and large loops in ANSI MAP, BACapp, Bluetooth HCI, IEEE 802.3, LTP, and R3 dissectors have been fixed. Discovered by Laurent Butti (http://www.wireshark.org/security/wnpa-sec-2012-08.html [CVE-2012-2392])

The DIAMETER dissector could try to allocate memory improperly and crash (http://www.wireshark.org/security/wnpa-sec-2012-09.html [CVE-2012-2393])

Wireshark could crash on SPARC processors due to misaligned memory.
Discovered by Klaus Heckelmann (http://www.wireshark.org/security/wnpa-sec-2012-10.html [CVE-2012-2394])

The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted packet, as demonstrated by a usbmon dump (CVE-2012-4048).

epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet (CVE-2012-4049).

The DCP ETSI dissector could trigger a zero division (CVE-2012-4285).

The XTP dissector could go into an infinite loop (CVE-2012-4288).

The AFP dissector could go into a large loop (CVE-2012-4289).

The RTPS2 dissector could overflow a buffer (CVE-2012-4296).

The GSM RLC MAC dissector could overflow a buffer (CVE-2012-4297).

The CIP dissector could exhaust system memory (CVE-2012-4291).

The STUN dissector could crash (CVE-2012-4292).

The EtherCAT Mailbox dissector could abort (CVE-2012-4293).

The CTDB dissector could go into a large loop (CVE-2012-4290).

Martin Wilck discovered an infinite loop in the DRDA dissector (CVE-2012-5239).

The USB dissector could go into an infinite loop. (wnpa-sec-2012-31)

The ISAKMP dissector could crash. (wnpa-sec-2012-35)

The iSCSI dissector could go into an infinite loop. (wnpa-sec-2012-36)

The WTP dissector could go into an infinite loop. (wnpa-sec-2012-37)

The RTCP dissector could go into an infinite loop. (wnpa-sec-2012-38)

The ICMPv6 dissector could go into an infinite loop.
(wnpa-sec-2012-40)

Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP dissectors (wnpa-sec-2013-01).

The CLNP dissector could crash (wnpa-sec-2013-02).

The DTN dissector could crash (wnpa-sec-2013-03).

The MS-MMC dissector (and possibly others) could crash (wnpa-sec-2013-04).

The DTLS dissector could crash (wnpa-sec-2013-05).

The DCP-ETSI dissector could corrupt memory (wnpa-sec-2013-07).

The Wireshark dissection engine could crash (wnpa-sec-2013-08).

The NTLMSSP dissector could overflow a buffer (wnpa-sec-2013-09).

The sFlow dissector could go into an infinite loop (CVE-2012-6054).

The SCTP dissector could go into an infinite loop (CVE-2012-6056).

The MS-MMS dissector could crash (CVE-2013-2478).

The RTPS and RTPS2 dissectors could crash (CVE-2013-2480).

The Mount dissector could crash (CVE-2013-2481).

The AMPQ dissector could go into an infinite loop (CVE-2013-2482).

The ACN dissector could attempt to divide by zero (CVE-2013-2483).

The CIMD dissector could crash (CVE-2013-2484).

The FCSP dissector could go into an infinite loop (CVE-2013-2485).

The DTLS dissector could crash (CVE-2013-2488).

This advisory provides the latest version of Wireshark (1.6.14) which is not vulnerable to these issues.

Upgrade to wireshark 1.6.10 The following vulnerabilities have been fixed.

wnpa-sec-2012-13: The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-15: The XTP dissector could go into an infinite loop. wnpa-sec-2012-17: The AFP dissector could go into a large loop. wnpa-sec-2012-18: The RTPS2 dissector could overflow a buffer. wnpa-sec-2012-20: The CIP dissector could exhaust system memory. wnpa-sec-2012-21: The STUN dissector could crash.
wnpa-sec-2012-22: The EtherCAT Mailbox dissector could abort.
wnpa-sec-2012-23: The CTDB dissector could go into a large loop.

See http://www.wireshark.org/docs/relnotes/wireshark-1.6.10.html for details. The following vulnerabilities have been fixed.
wnpa-sec-2012-11: The PPP dissector could crash. wnpa-sec-2012-12: The NFS dissector could use excessive amounts of CPU. The following vulnerabilities have been fixed. wnpa-sec-2012-11: The PPP dissector could crash. wnpa-sec-2012-12: The NFS dissector could use excessive amounts of CPU.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Wireshark was updated to 1.8.2 :

  - The DCP ETSI dissector could trigger a zero division.
    (wnpa-sec-2012-13 CVE-2012-4285)

  - The MongoDB dissector could go into a large loop.
    (wnpa-sec-2012-14 CVE-2012-4287)

  - The XTP dissector could go into an infinite loop.
    (wnpa-sec-2012-15 CVE-2012-4288)

  - The ERF dissector could overflow a buffer.
    (wnpa-sec-2012-16 CVE-2012-4294 CVE-2012-4295)

  - The AFP dissector could go into a large loop.
    (wnpa-sec-2012-17 CVE-2012-4289)

  - The RTPS2 dissector could overflow a buffer.
    (wnpa-sec-2012-18 CVE-2012-4296)

  - The GSM RLC MAC dissector could overflow a buffer.
    (wnpa-sec-2012-19 CVE-2012-4297)

  - The CIP dissector could exhaust system memory.
    (wnpa-sec-2012-20 CVE-2012-4291)

  - The STUN dissector could crash. (wnpa-sec-2012-21     CVE-2012-4292)

  - The EtherCAT Mailbox dissector could abort.
    (wnpa-sec-2012-22 CVE-2012-4293)

  - The CTDB dissector could go into a large loop.
    (wnpa-sec-2012-23 CVE-2012-4290)

  - The pcap-ng file parser could trigger a zero division.
    (wnpa-sec-2012-24 CVE-2012-4286)

  - The Ixia IxVeriWave file parser could overflow a buffer.
    (wnpa-sec-2012-25 CVE-2012-4298) Further bug fixes and     updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.2.h     tml

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.2 advisory.

  - Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia     IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute     arbitrary code via a crafted packet-trace file that triggers a buffer overflow. (CVE-2012-4298)

  - Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the     GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to     execute arbitrary code via a malformed packet. (CVE-2012-4297)

  - The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x     before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of     service (divide-by-zero error and application crash) via a zero-length message. (CVE-2012-4285)

  - The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x     before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and     application crash) via a crafted pcap-ng file. (CVE-2012-4286)

  - epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote     attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document     length. (CVE-2012-4287)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-031:01 advisory.

    This package lays base for libpcap, a packet capture and filtering library, contains command-line     utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged     separately to GTK+ package.
    Security issues fixed with this release:
     CVE-2012-2392     Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service     (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5)     LTP dissectors.
     CVE-2012-3825     Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers     to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI     dissectors, a different vulnerability than CVE-2012-2392.
     CVE-2012-4285     The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x     before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of     service (divide-by-zero error and application crash) via a zero-length message.
     CVE-2012-4288     Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in     Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to     cause a denial of service (loop or application crash) via a large value for a span length.
     CVE-2012-4289     epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10,     and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via     a large number of ACL entries.
     CVE-2012-4290     The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows     remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.
     CVE-2012-4291     The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows     remote attackers to cause a denial of service (memory consumption) via a malformed packet.
     CVE-2012-4292     The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark     1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-     destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service     (application crash) via a malformed packet.
     CVE-2012-6056     Integer overflow in the dissect_sack_chunk function in epan/dissectors/packet-sctp.c in the SCTP dissector     in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop) via a     crafted Duplicate TSN count.
     CVE-2012-6059     The dissect_isakmp function in epan/dissectors/packet-isakmp.c in the ISAKMP dissector in Wireshark 1.6.x     before 1.6.12 and 1.8.x before 1.8.4 uses an incorrect data structure to determine IKEv2 decryption     parameters, which allows remote attackers to cause a denial of service (application crash) via a malformed     packet.
     CVE-2012-6060     Integer overflow in the dissect_iscsi_pdu function in epan/dissectors/packet-iscsi.c in the iSCSI     dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a     denial of service (infinite loop) via a malformed packet.
     CVE-2012-6061     The dissect_wtp_common function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark 1.6.x     before 1.6.12 and 1.8.x before 1.8.4 uses an incorrect data type for a certain length field, which allows     remote attackers to cause a denial of service (integer overflow and infinite loop) via a crafted value in     a packet.
     CVE-2012-6062     The dissect_rtcp_app function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x     before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service (infinite loop)     via a crafted packet.
     CVE-2013-3557     The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark     1.6.x before 1.6.15 and 1.8.x before 1.8.7 does not properly initialize a certain variable, which allows     remote attackers to cause a denial of service (application crash) via a malformed packet.
     CVE-2013-3559     epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect     integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap     memory corruption or NULL pointer dereference, and application crash) via a malformed packet.
     CVE-2013-3561     Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of     service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector,     an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector.
     CVE-2013-4081     The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark     1.6.x before 1.6.16 and 1.8.x before 1.8.8 does not properly determine when to use a recursive approach,     which allows remote attackers to cause a denial of service (stack consumption) via a crafted packet.
     CVE-2013-4083     The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x     before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which     allows remote attackers to cause a denial of service (application crash) via a crafted packet.
     CVE-2013-4927     Integer signedness error in the get_type_length function in epan/dissectors/packet-btsdp.c in the     Bluetooth SDP dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers     to cause a denial of service (loop and CPU consumption) via a crafted packet.
     CVE-2013-4931     epan/proto.c in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a     denial of service (loop) via a crafted packet that is not properly handled by the GSM RR dissector.
     CVE-2013-4932     Multiple array index errors in epan/dissectors/packet-gsm_a_common.c in the GSM A Common dissector in     Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allow remote attackers to cause a denial of service     (application crash) via a crafted packet.
     CVE-2013-4933     The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and     1.10.x before 1.10.1 does not properly allocate memory, which allows remote attackers to cause a denial of     service (application crash) via a crafted packet-trace file.
     CVE-2013-4934     The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and     1.10.x before 1.10.1 does not initialize certain structure members, which allows remote attackers to cause     a denial of service (application crash) via a crafted packet-trace file.
     CVE-2013-4935     The dissect_per_length_determinant function in epan/dissectors/packet-per.c in the ASN.1 PER dissector in     Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not initialize a length field in certain     abnormal situations, which allows remote attackers to cause a denial of service (application crash) via a     crafted packet.
     CVE-2013-4936     The IsDFP_Frame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in     Wireshark 1.10.x before 1.10.1 does not validate MAC addresses, which allows remote attackers to cause a     denial of service (NULL pointer dereference and application crash) via a crafted packet.
     CVE-2013-5721     The dissect_mq_rr function in epan/dissectors/packet-mq.c in the MQ dissector in Wireshark 1.8.x before     1.8.10 and 1.10.x before 1.10.2 does not properly determine when to enter a certain loop, which allows     remote attackers to cause a denial of service (application crash) via a crafted packet.
    Fixed bugs:
     Wireshark now support parsing the RECLAIM-COMPLETE opcode when inspecting traffic generated by NFSv4.1     and as such can now dissect and handle NFSv4.1 traffic.
     Previously, the dfilter-test.py test suite reported many failures because the frame arrival times in a     text file were reported one hour ahead from the timestamps in the packet capture file; this has been     fixed.
     Previously, the tshark -D command returned output to STDERR instead of STDOUT. This could break scripts     parsing the tshark -D output and has been fixed: tshark -D now outputs to STDOUT.
     Fixed an array overrun that could make wireshark crash.
     Added the manual pages for the dftest and randpkt commands.
    Enhancements:
     Added support for InfiniBand and GlusterFS traffic.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2013-3559, CVE-2013-4083)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2012-2392, CVE-2012-3825, CVE-2012-4285, CVE-2012-4288, CVE-2012-4289, CVE-2012-4290, CVE-2012-4291, CVE-2012-4292, CVE-2012-5595, CVE-2012-5597, CVE-2012-5598, CVE-2012-5599, CVE-2012-5600, CVE-2012-6056, CVE-2012-6059, CVE-2012-6060, CVE-2012-6061, CVE-2012-6062, CVE-2013-3557, CVE-2013-3561, CVE-2013-4081, CVE-2013-4927, CVE-2013-4931, CVE-2013-4932, CVE-2013-4933, CVE-2013-4934, CVE-2013-4935, CVE-2013-4936, CVE-2013-5721)

The wireshark packages have been upgraded to upstream version 1.8.10, which provides a number of bug fixes and enhancements over the previous versions. For more information on the bugs fixed, enhancements included, and supported protocols introduced, refer to the Wireshark Release Notes.

This update also fixes the following bugs :

  - Previously, Wireshark did not parse the RECLAIM-COMPLETE     opcode when inspecting traffic generated by NFSv4.1. A     patch has been provided to enable the parsing of the     RECLAIM_COMPLETE opcode, and Wireshark is now able to     properly dissect and handle NFSv4.1 traffic.

  - Prior to this update, frame arrival times in a text file     were reported one hour ahead from the timestamps in the     packet capture file. This resulted in various failures     being reported by the dfilter-test.py test suite. To fix     this bug, frame arrival timestamps have been shifted by     one hour, thus fixing this bug.

  - The 'tshark -D' command returned output to STDERR     instead of STDOUT, which could break scripts that are     parsing the 'tshark -D' output. This bug has been fixed,     and the 'tshark -D' command now writes output data to a     correct standard stream.

  - Due to an array overrun, Wireshark could experience     undefined program behavior or could unexpectedly     terminate. With this update, proper array handling     ensures Wireshark no longer crashes in the described     scenario.

  - Previously, the dftest and randpkt command line     utilities lacked manual pages. This update adds proper     manual pages for both utilities.

In addition, this update adds the following enhancements :

  - With this update, Wireshark is able to properly dissect     and handle InfiniBand and GlusterFS traffic.

All running instances of Wireshark must be restarted for the update to take effect.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0125 advisory.

    - fixed CVE-2012-4285, CVE-2012-4289, CVE-2012-4291 and CVE-2012-4290       (#849521)
    - fixed various flaws: CVE-2011-1959 CVE-2011-2175 CVE-2011-1958       CVE-2011-2698 CVE-2011-4102 CVE-2012-0041 CVE-2012-0042 CVE-2012-0066       CVE-2012-0067

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0125 advisory.

    Wireshark, previously known as Ethereal, is a network protocol analyzer. It     is used to capture and browse the traffic running on a computer network.

    A heap-based buffer overflow flaw was found in the way Wireshark handled     Endace ERF (Extensible Record Format) capture files. If Wireshark opened a     specially-crafted ERF capture file, it could crash or, possibly, execute     arbitrary code as the user running Wireshark. (CVE-2011-4102)

    Several denial of service flaws were found in Wireshark. Wireshark could     crash or stop responding if it read a malformed packet off a network, or     opened a malicious dump file. (CVE-2011-1958, CVE-2011-1959, CVE-2011-2175,     CVE-2011-2698, CVE-2012-0041, CVE-2012-0042, CVE-2012-0066, CVE-2012-0067,     CVE-2012-4285, CVE-2012-4289, CVE-2012-4290, CVE-2012-4291)

    The CVE-2011-1958, CVE-2011-1959, CVE-2011-2175, and CVE-2011-4102 issues     were discovered by Huzaifa Sidhpurwala of the Red Hat Security Response     Team.

    This update also fixes the following bugs:

    * When Wireshark starts with the X11 protocol being tunneled through an SSH     connection, it automatically prepares its capture filter to omit the SSH     packets. If the SSH connection was to a link-local IPv6 address including     an interface name (for example ssh -X [ipv6addr]%eth0), Wireshark parsed     this address erroneously, constructed an incorrect capture filter and     refused to capture packets. The Invalid capture filter message was     displayed. With this update, parsing of link-local IPv6 addresses is fixed     and Wireshark correctly prepares a capture filter to omit SSH packets over     a link-local IPv6 connection. (BZ#438473)

    * Previously, Wireshark's column editing dialog malformed column names when     they were selected. With this update, the dialog is fixed and no longer     breaks column names. (BZ#493693)

    * Previously, TShark, the console packet analyzer, did not properly analyze     the exit code of Dumpcap, Wireshark's packet capturing back end. As a     result, TShark returned exit code 0 when Dumpcap failed to parse its     command-line arguments. In this update, TShark correctly propagates the     Dumpcap exit code and returns a non-zero exit code when Dumpcap fails.
    (BZ#580510)

    * Previously, the TShark -s (snapshot length) option worked only for a     value greater than 68 bytes. If a lower value was specified, TShark     captured just 68 bytes of incoming packets. With this update, the -s     option is fixed and sizes lower than 68 bytes work as expected. (BZ#580513)

    This update also adds the following enhancement:

    * In this update, support for the NetDump protocol was added. (BZ#484999)

    All users of Wireshark are advised to upgrade to these updated packages,     which contain backported patches to correct these issues and add this     enhancement. All running instances of Wireshark must be restarted for the     update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 1.6.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.10 advisory.

  - Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the     GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to     execute arbitrary code via a malformed packet. (CVE-2012-4297)

  - The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x     before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of     service (divide-by-zero error and application crash) via a zero-length message. (CVE-2012-4285)

  - Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in     Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to     cause a denial of service (loop or application crash) via a large value for a span length. (CVE-2012-4288)

  - epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10,     and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via     a large number of ACL entries. (CVE-2012-4289)

  - The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows     remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.
    (CVE-2012-4290)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
64231	SuSE 11.2 Security Update : wireshark (SAT Patch Number 6760)	Nessus	SuSE Local Security Checks	1/25/2013	1/19/2021	low
80804	Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark3)	Nessus	Solaris Local Security Checks	1/19/2015	1/14/2021	high
61573	Wireshark 1.8.x < 1.8.2 Multiple Vulnerabilities	Nessus	Windows	8/17/2012	10/20/2026	high
66069	Mandriva Linux Security Advisory : wireshark (MDVSA-2013:055)	Nessus	Mandriva Local Security Checks	4/20/2013	1/6/2021	high
61688	Fedora 17 : wireshark-1.6.10-1.fc17 (2012-12091)	Nessus	Fedora Local Security Checks	8/28/2012	1/11/2021	high
74732	openSUSE Security Update : wireshark (openSUSE-SU-2012:1067-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	high
368084	Wireshark 1.8.x < 1.8.2 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	10/20/2026	10/20/2026	high
291484	MiracleLinux 4 : wireshark-1.8.10-4.AXS4 (AXSA:2014-031:01)	Nessus	Miracle Linux Local Security Checks	1/19/2026	1/19/2026	high
71301	Scientific Linux Security Update : wireshark on SL6.x i386/x86_64 (20131121)	Nessus	Scientific Linux Local Security Checks	12/10/2013	1/14/2021	high
68696	Oracle Linux 5 : wireshark (ELSA-2013-0125)	Nessus	Oracle Linux Local Security Checks	7/12/2013	10/22/2024	high
63408	RHEL 5 : wireshark (RHSA-2013:0125)	Nessus	Red Hat Local Security Checks	1/8/2013	11/4/2024	high
61572	Wireshark 1.6.x < 1.6.10 Multiple Vulnerabilities	Nessus	Windows	8/17/2012	10/8/2026	high

Detections

Analytics

Plugins Search

low

high

high

high

high

high

high

high

high

high

high

high