远程 Windows 主机上安装的 Wireshark 版本为 2.0.0 版。因此，它受到以下组件中的多种拒绝服务漏洞的影响：

- 802.11 分析器
 - ANSI A 分析器
 - Ascend 文件分析器
 - BER 分析器
 - 蓝牙属性分析器
 - DIAMETER 分析器
 - GSM A 分析器
 - IPMI 分析器
 - MP2T 文件分析器
 - MS-WSP 分析器
 - NBAP 分析器
 - NLM 分析器
 - NWP 分析器
 - PPI 分析器
 - RSL 分析器
 - RSVP 分析器
 - S7COMM 分析器
 - SCTP 分析器
 - Sniffer 文件解析器
 - TDS 分析器
 - VeriWave 文件解析器
 - ZigBee ZCL 分析器
 - zlib 压缩

请注意，Nessus 并未测试这些问题，而是只依赖于应用程序自我报告的版本号。

遠端主機受到 GLSA-201604-05 中所述的弱點影響 (Wireshark：多個弱點)

在 Wireshark 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。
 影響：

遠端攻擊者可造成拒絕服務，且本機攻擊者可提升權限。
 因應措施：

目前尚無已知的因應措施。

远程主机受到 GLSA-201604-05 中所述漏洞的影响（Wireshark：多种漏洞）

在 Wireshark 中发现多种漏洞。请检查下面引用的 CVE 标识符以了解详细信息。
 影响：

远程攻击者可造成拒绝服务，且本地攻击者可升级权限。
 变通方案：

目前无任何已知的变通方案。

遠端 Windows 主機上安裝的 Wireshark 版本為 2.0.0 版。因此受到下列元件中的多個拒絕服務弱點影響：

- 802.11 dissector
 - ANSI A dissector
 - Ascend file parser
 - BER dissector
 - Bluetooth Attribute dissector
 - DIAMETER dissector
 - GSM A dissector
 - IPMI dissector
 - MP2T file parser
 - MS-WSP dissector
 - NBAP dissector
 - NLM dissector
 - NWP dissector
 - PPI dissector
 - RSL dissector
 - RSVP dissector
 - S7COMM dissector
 - SCTP dissector
 - Sniffer file parser
 - TDS dissector
 - VeriWave file parser
 - ZigBee ZCL dissector
 - zlib compression

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

リモートホストは、GLSA-201604-05 で説明されている脆弱性の影響を受けます（Wireshark：複数の脆弱性）

Wireshark　に複数の脆弱性が発見されました。詳細については、以下で参照されている CVE 識別子をレビューしてください。
 影響：

リモートの攻撃者が、サービス拒否を引き起こし、ローカルの攻撃者が、権限を昇格する可能性があります。
 回避策：

現時点で、既知の回避策はありません。

リモートの Windows ホストにインストールされている Wireshark のバージョンは、2.0.0 です。したがって、次のコンポーネントで複数のサービス拒否の脆弱性による影響を受けます：

  - 802.11 dissector
  - ANSI A dissector
  - Ascend file parser
  - BER dissector
  - Bluetooth Attribute dissector
  - DIAMETER dissector
  - GSM A dissector
  - IPMI dissector
  - MP2T file parser
  - MS-WSP dissector
  - NBAP dissector
  - NLM dissector
  - NWP dissector
  - PPI dissector
  - RSL dissector
  - RSVP dissector
  - S7COMM dissector
  - SCTP dissector
  - Sniffer file parser
  - TDS dissector
  - VeriWave file parser
  - ZigBee ZCL dissector
  - zlib compression

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The remote host is affected by the vulnerability described in GLSA-201604-05 (Wireshark: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Wireshark. Please       review the CVE identifiers referenced below for details.
  Impact :

    Remote attackers could cause Denial of Service and local attackers could       escalate privileges.
  Workaround :

    There is no known workaround at this time.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.1 advisory.

  - The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark     2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of     service (memory consumption or application crash) via a crafted packet. (CVE-2015-8742)

  - epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before     2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service     (NULL pointer dereference and application crash) via a crafted packet. (CVE-2015-8711)

  - Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before     1.12.9 and 2.0.x before 2.0.1, when the Match MSG/RES packets for async NLM option is enabled, allows     remote attackers to cause a denial of service (application crash) via a crafted packet. (CVE-2015-8718)

  - The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark     1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote     attackers to cause a denial of service (application crash) via a crafted packet. (CVE-2015-8720)

  - Buffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1.12.9 and     2.0.x before 2.0.1 allows remote attackers to cause a denial of service (application crash) via a crafted     packet with zlib compression. (CVE-2015-8721)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 2.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.1 advisory.

  - The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark     2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of     service (memory consumption or application crash) via a crafted packet. (CVE-2015-8742)

  - epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before     2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service     (NULL pointer dereference and application crash) via a crafted packet. (CVE-2015-8711)

  - Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before     1.12.9 and 2.0.x before 2.0.1, when the Match MSG/RES packets for async NLM option is enabled, allows     remote attackers to cause a denial of service (application crash) via a crafted packet. (CVE-2015-8718)

  - The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark     1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote     attackers to cause a denial of service (application crash) via a crafted packet. (CVE-2015-8720)

  - Buffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1.12.9 and     2.0.x before 2.0.1 allows remote attackers to cause a denial of service (application crash) via a crafted     packet with zlib compression. (CVE-2015-8721)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
87825	Wireshark 2.0.0 多种 DoS 问题	Nessus	Windows	1/8/2016	10/20/2026	medium
90744	GLSA-201604-05：Wireshark：多個弱點	Nessus	Gentoo Local Security Checks	4/27/2016	1/11/2021	high
90744	GLSA-201604-05：Wireshark：多种漏洞	Nessus	Gentoo Local Security Checks	4/27/2016	1/11/2021	high
87825	Wireshark 2.0.0 多個 DoS 問題	Nessus	Windows	1/8/2016	10/20/2026	medium
90744	GLSA-201604-05：Wireshark：複数の脆弱性	Nessus	Gentoo Local Security Checks	4/27/2016	1/11/2021	high
87825	Wireshark 2.0.0 複数の DoS	Nessus	Windows	1/8/2016	10/20/2026	medium
90744	GLSA-201604-05 : Wireshark: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	4/27/2016	1/11/2021	high
368085	Wireshark 2.0.x < 2.0.1 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	10/20/2026	10/20/2026	medium
87825	Wireshark 2.0.x < 2.0.1 Multiple Vulnerabilities	Nessus	Windows	1/8/2016	10/20/2026	medium

Detections

Analytics

Plugins Search

medium

high

high

medium

high

medium

high

medium

medium