wireshark was updated to 1.8.5 to fix bugs and security issues.

Vulnerabilities fixed :

  - Infinite and large loops in the Bluetooth HCI, CSN.1,     DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols,     MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01     CVE-2013-1572 CVE-2013-1573 CVE-2013-1574 CVE-2013-1575     CVE-2013-1576 CVE-2013-1577 CVE-2013-1578 CVE-2013-1579     CVE-2013-1580 CVE-2013-1581

  - The CLNP dissector could crash wnpa-sec-2013-02     CVE-2013-1582

  - The DTN dissector could crash wnpa-sec-2013-03     CVE-2013-1583 CVE-2013-1584

  - The MS-MMC dissector (and possibly others) could crash     wnpa-sec-2013-04 CVE-2013-1585

  - The DTLS dissector could crash wnpa-sec-2013-05     CVE-2013-1586

  - The ROHC dissector could crash wnpa-sec-2013-06     CVE-2013-1587

  - The DCP-ETSI dissector could corrupt memory     wnpa-sec-2013-07 CVE-2013-1588

  - The Wireshark dissection engine could crash     wnpa-sec-2013-08 CVE-2013-1589

  - The NTLMSSP dissector could overflow a buffer     wnpa-sec-2013-09 CVE-2013-1590

  + Further bug fixes and updated protocol support as listed     in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.5.h     tml

wireshark was updated to 1.8.5 (bnc#801131), fixing bugs and security issues :

The following vulnerabilities have been fixed :

  - Infinite and large loops in the Bluetooth HCI, CSN.1,     DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols,     MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01     CVE-2013-1572 / CVE-2013-1573 / CVE-2013-1574 /     CVE-2013-1575 / CVE-2013-1576 / CVE-2013-1577 /     CVE-2013-1578 / CVE-2013-1579 / CVE-2013-1580 /     CVE-2013-1581

  - The CLNP dissector could crash wnpa-sec-2013-02.
    (CVE-2013-1582)

  - The DTN dissector could crash wnpa-sec-2013-03.
    (CVE-2013-1583 / CVE-2013-1584)

  - The MS-MMC dissector (and possibly others) could crash     wnpa-sec-2013-04. (CVE-2013-1585)

  - The DTLS dissector could crash wnpa-sec-2013-05.
    (CVE-2013-1586)

  - The ROHC dissector could crash wnpa-sec-2013-06.
    (CVE-2013-1587)

  - The DCP-ETSI dissector could corrupt memory     wnpa-sec-2013-07. (CVE-2013-1588)

  - The Wireshark dissection engine could crash     wnpa-sec-2013-08. (CVE-2013-1589)

  - The NTLMSSP dissector could overflow a buffer     wnpa-sec-2013-09 CVE-2013-1590: Further bug fixes and     updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.5.h     tml

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.5 advisory.

  - Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows     remote attackers to cause a denial of service (application crash) via a malformed packet. (CVE-2013-1590)

  - The dissect_oampdu_event_notification function in epan/dissectors/packet-slowprotocols.c in the IEEE 802.3     Slow Protocols dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle     certain short lengths, which allows remote attackers to cause a denial of service (infinite loop) via a     malformed packet. (CVE-2013-1572)

  - The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x     before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows     remote attackers to cause a denial of service (infinite loop) via a malformed packet. (CVE-2013-1573)

  - The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI     dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a     counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a     malformed packet. (CVE-2013-1574)

  - The dissect_r3_cmd_alarmconfigure function in epan/dissectors/packet-assa_r3.c in the R3 dissector in     Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length,     which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    (CVE-2013-1575)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 1.8.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.5 advisory.

  - Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows     remote attackers to cause a denial of service (application crash) via a malformed packet. (CVE-2013-1590)

  - The dissect_oampdu_event_notification function in epan/dissectors/packet-slowprotocols.c in the IEEE 802.3     Slow Protocols dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle     certain short lengths, which allows remote attackers to cause a denial of service (infinite loop) via a     malformed packet. (CVE-2013-1572)

  - The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x     before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows     remote attackers to cause a denial of service (infinite loop) via a malformed packet. (CVE-2013-1573)

  - The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI     dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a     counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a     malformed packet. (CVE-2013-1574)

  - The dissect_r3_cmd_alarmconfigure function in epan/dissectors/packet-assa_r3.c in the R3 dissector in     Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length,     which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    (CVE-2013-1575)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
74879	openSUSE Security Update : wireshark (openSUSE-SU-2013:0276-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	low
64795	SuSE 11.2 Security Update : wireshark (SAT Patch Number 7317)	Nessus	SuSE Local Security Checks	2/22/2013	1/19/2021	low
64796	SuSE 11.2 Security Update : wireshark (SAT Patch Number 7317)	Nessus	SuSE Local Security Checks	2/22/2013	1/19/2021	low
365102	Wireshark 1.8.x < 1.8.5 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	10/12/2026	10/12/2026	high
64362	Wireshark 1.8.x < 1.8.5 Multiple Vulnerabilities	Nessus	Windows	1/30/2013	10/12/2026	high

Detections

Analytics

Plugins Search

low

low

low

high

high