The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.2 advisory.

  - Unspecified vulnerability in the LDAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2     allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    (CVE-2013-5722)

  - Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows     remote attackers to cause a denial of service (application crash) via a crafted packet. (CVE-2013-5720)

  - The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain     free list, which allows remote attackers to cause a denial of service (application crash) via a crafted     packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c.
    (CVE-2013-5717)

  - The dissect_nbap_T_dCH_ID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark     1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dch_id value, which allows remote     attackers to cause a denial of service (application crash) via a crafted packet. (CVE-2013-5718)

  - epan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x     before 1.10.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    (CVE-2013-5719)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 1.10.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.2 advisory.

  - Unspecified vulnerability in the LDAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2     allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    (CVE-2013-5722)

  - Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows     remote attackers to cause a denial of service (application crash) via a crafted packet. (CVE-2013-5720)

  - The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain     free list, which allows remote attackers to cause a denial of service (application crash) via a crafted     packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c.
    (CVE-2013-5717)

  - The dissect_nbap_T_dCH_ID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark     1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dch_id value, which allows remote     attackers to cause a denial of service (application crash) via a crafted packet. (CVE-2013-5718)

  - epan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x     before 1.10.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    (CVE-2013-5719)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Solaris system is missing necessary patches to address security updates :

  - The Bluetooth HCI ACL dissector in Wireshark 1.10.x     before 1.10.2 does not properly maintain a certain free     list, which allows remote attackers to cause a denial of     service (application crash) via a crafted packet that is     not properly handled by the wmem_block_alloc function in     epan/wmem/wmem_allocator_block.c. (CVE-2013-5717)

  - The dissect_nbap_T_dCH_ID function in     epan/dissectors/packet-nbap.c in the NBAP dissector in     Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2     does not restrict the dch_id value, which allows remote     attackers to cause a denial of service (application     crash) via a crafted packet. (CVE-2013-5718)

  - epan/dissectors/packet-assa_r3.c in the ASSA R3     dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x     before 1.10.2 allows remote attackers to cause a denial     of service (infinite loop) via a crafted packet.
    (CVE-2013-5719)

  - Buffer overflow in the RTPS dissector in Wireshark 1.8.x     before 1.8.10 and 1.10.x before 1.10.2 allows remote     attackers to cause a denial of service (application     crash) via a crafted packet. (CVE-2013-5720)

  - The dissect_mq_rr function in     epan/dissectors/packet-mq.c in the MQ dissector in     Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2     does not properly determine when to enter a certain     loop, which allows remote attackers to cause a denial of     service (application crash) via a crafted packet.
    (CVE-2013-5721)

  - Unspecified vulnerability in the LDAP dissector in     Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2     allows remote attackers to cause a denial of service     (application crash) via a crafted packet.
    (CVE-2013-5722)

The remote host is affected by the vulnerability described in GLSA-201312-13 (Wireshark: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Wireshark. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Published	Updated	Severity
311298	Wireshark 1.10.x < 1.10.2 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	4/30/2026	4/30/2026	high
69881	Wireshark 1.10.x < 1.10.2 Multiple Vulnerabilities	Nessus	Windows	9/13/2013	4/30/2026	high
80809	Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark7)	Nessus	Solaris Local Security Checks	1/19/2015	1/14/2021	medium
71488	GLSA-201312-13 : Wireshark: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	12/17/2013	1/6/2021	medium

Detections

Analytics

Plugins Search

high

high

medium

medium