ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3906 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3906-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     September 30, 2024                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : wireshark     Version        : 3.4.16-0+deb11u1     CVE ID         : CVE-2021-4181 CVE-2021-4182 CVE-2021-4184 CVE-2021-4185                      CVE-2021-4186 CVE-2021-4190 CVE-2022-0581 CVE-2022-0582                      CVE-2022-0583 CVE-2022-0585 CVE-2022-0586 CVE-2022-3190                      CVE-2022-4344 CVE-2022-4345 CVE-2023-0411 CVE-2023-0412                      CVE-2023-0413 CVE-2023-0415 CVE-2023-0416 CVE-2023-0417                      CVE-2023-0666 CVE-2023-0667 CVE-2023-0668 CVE-2023-1161                      CVE-2023-1992 CVE-2023-1993 CVE-2023-1994 CVE-2023-2855                      CVE-2023-2856 CVE-2023-2858 CVE-2023-2879 CVE-2023-2906                      CVE-2023-2952 CVE-2023-3648 CVE-2023-3649 CVE-2023-4511                      CVE-2023-4512 CVE-2023-4513 CVE-2023-6175 CVE-2024-0208                      CVE-2024-0209 CVE-2024-0211 CVE-2024-2955 CVE-2024-4853                      CVE-2024-4854 CVE-2024-8250 CVE-2024-8645     Debian Bug     : 1033756 1034721 1041101 1059925 1068111 1080298

    Multiple vulnerabilities have been fixed in the network traffic analyzer     Wireshark.

    CVE-2021-4181

        Sysdig Event dissector crash

    CVE-2021-4182

        RFC 7468 dissector crash

    CVE-2021-4184

        BitTorrent DHT dissector infinite loop

    CVE-2021-4185

        RTMPT dissector infinite loop

    CVE-2021-4186

        Gryphon dissector crash

    CVE-2021-4190

        Kafka dissector large loop DoS

    CVE-2022-0581

        CMS protocol dissector crash

    CVE-2022-0582

        CSN.1 protocol dissector unaligned access

    CVE-2022-0583

        PVFS protocol dissector crash

    CVE-2022-0585

        Large loops in multiple dissectors

    CVE-2022-0586

        RTMPT protocol dissector infinite loop

    CVE-2022-3190

        F5 Ethernet Trailer dissector infinite loop

    CVE-2022-4344

        Kafka protocol dissector memory exhaustion

    CVE-2022-4345

        Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors

    CVE-2023-0411

        Excessive loops in the BPv6, NCP and RTPS protocol dissectors

    CVE-2023-0412

        TIPC dissector crash

    CVE-2023-0413

        Dissection engine bug DoS

    CVE-2023-0415

        iSCSI dissector crash

    CVE-2023-0416

        GNW dissector crash

    CVE-2023-0417

        NFS dissector memory leak

    CVE-2023-0666

        RTPS parsing heap overflow

    CVE-2023-0667

        MSMMS dissector buffer overflow

    CVE-2023-0668

        IEEE C37.118 Synchrophasor dissector crash

    CVE-2023-1161

        ISO 15765 dissector crash

    CVE-2023-1992

        RPCoRDMA dissector crash

    CVE-2023-1993

        LISP dissector large loop

    CVE-2023-1994

        GQUIC dissector crash

    CVE-2023-2855

        Candump log parser crash

    CVE-2023-2856

        VMS TCPIPtrace file parser crash

    CVE-2023-2858

        NetScaler file parser crash

    CVE-2023-2879

        GDSDB dissector infinite loop

    CVE-2023-2906

        CP2179 dissector crash

    CVE-2023-2952

        XRA dissector infinite loop

    CVE-2023-3648

        Kafka dissector crash

    CVE-2023-3649

        iSCSI dissector crash

    CVE-2023-4511

        BT SDP dissector infinite loop

    CVE-2023-4512

        CBOR dissector crash

    CVE-2023-4513

        BT SDP dissector memory leak

    CVE-2023-6175

        NetScreen file parser crash

    CVE-2024-0208

        GVCP dissector crash

    CVE-2024-0209

        IEEE 1609.2 dissector crash

    CVE-2024-0211

        DOCSIS dissector crash

    CVE-2024-2955

        T.38 dissector crash

    CVE-2024-4853

        Editcap byte chopping crash

    CVE-2024-4854

        MONGO dissector infinite loop

    CVE-2024-8250

        NTLMSSP dissector crash

    CVE-2024-8645

        SPRT dissector crash

    For Debian 11 bullseye, these problems have been fixed in version     3.4.16-0+deb11u1.

    We recommend that you upgrade your wireshark packages.

    For the detailed security status of wireshark please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/wireshark

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - wireshark: free operation on an uninitialized memory address in wiretap/netmon.c (CVE-2018-6836)

  - In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash. This was     addressed in wiretap/vwr.c by correcting the signature timestamp bounds checks. (CVE-2018-5334)

  - In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in     epan/dissectors/packet-wcp.c by validating the available buffer length. (CVE-2018-5335)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - wireshark: Kafka dissector infinite loop (CVE-2021-4190)

  - wireshark: ISO 15765 and ISO 10681 dissector crash (CVE-2023-1161)

  - Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via     packet injection or crafted capture file (CVE-2021-4181)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote host is affected by the vulnerability described in GLSA-202309-02 (Wireshark: Multiple Vulnerabilities)

  - Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet     injection or crafted capture file (CVE-2022-3725)

  - Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version     4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution     in the context of the process running Wireshark. (CVE-2023-0666)

  - Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version     4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly     code execution in the context of the process running Wireshark (CVE-2023-0667)

  - Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark     version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code     execution in the context of the process running Wireshark. (CVE-2023-0668)

  - ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of     service via packet injection or crafted capture file (CVE-2023-1161)

  - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1992)

  - LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1993)

  - GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet     injection or crafted capture file (CVE-2023-1994)

  - BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted     capture file (CVE-2023-2854, CVE-2023-2857)

  - Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     crafted capture file (CVE-2023-2855)

  - VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service     via crafted capture file (CVE-2023-2856)

  - NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     crafted capture file (CVE-2023-2858)

  - GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet     injection or crafted capture file (CVE-2023-2879)

  - XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     packet injection or crafted capture file (CVE-2023-2952)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Oracle Solaris product of Oracle     Systems (component: Device Driver Interface). The     supported version that is affected is 11. Easily     exploitable vulnerability allows low privileged attacker     with logon to the infrastructure where Oracle Solaris     executes to compromise Oracle Solaris. Successful     attacks of this vulnerability can result in takeover of     Oracle Solaris. Note: CVE-2023-22023 is equivalent to     CVE-2023-31284. CVSS 3.1 Base Score 7.8     (Confidentiality, Integrity and Availability impacts).
    CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
    (CVE-2023-22023)

  - Vulnerability in the PeopleSoft Enterprise PeopleTools     product of Oracle PeopleSoft (component: Security     (OpenSSL)). Supported versions that are affected are     8.58, 8.59 and 8.60. Easily exploitable vulnerability     allows unauthenticated attacker with network access via     TLS to compromise PeopleSoft Enterprise PeopleTools.
    Successful attacks of this vulnerability can result in     unauthorized read access to a subset of PeopleSoft     Enterprise PeopleTools accessible data. CVSS 3.1 Base     Score 5.3 (Confidentiality impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
    (CVE-2022-2097)

  - Vulnerability in the MySQL Server product of Oracle     MySQL (component: Server: Connection Handling).
    Supported versions that are affected are 5.7.39 and     prior and 8.0.30 and prior. Easily exploitable     vulnerability allows high privileged attacker with     network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability     can result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of MySQL     Server. CVSS 3.1 Base Score 4.9 (Availability impacts).
    CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    (CVE-2022-21617)

  - Vulnerability in the MySQL Server product of Oracle     MySQL (component: Server: Optimizer). Supported versions     that are affected are 5.7.39 and prior and 8.0.30 and     prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple     protocols to compromise MySQL Server. Successful attacks     of this vulnerability can result in unauthorized ability     to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server. CVSS 3.1 Base Score 4.9     (Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    (CVE-2022-21608)

  - Vulnerability in the MySQL Server product of Oracle     MySQL (component: Server: Security: Encryption).
    Supported versions that are affected are 5.7.39 and     prior and 8.0.29 and prior. Easily exploitable     vulnerability allows low privileged attacker with     network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability     can result in unauthorized read access to a subset of     MySQL Server accessible data. CVSS 3.1 Base Score 4.3     (Confidentiality impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
    (CVE-2022-21592)

  - Vulnerability in the MySQL Server product of Oracle     MySQL (component: Server: Security: Privileges).
    Supported versions that are affected are 5.7.39 and     prior and 8.0.16 and prior. Easily exploitable     vulnerability allows low privileged attacker with     network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability     can result in unauthorized read access to a subset of     MySQL Server accessible data. CVSS 3.1 Base Score 4.3     (Confidentiality impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
    (CVE-2022-21589)

  - Vulnerability in the MySQL Server product of Oracle     MySQL (component: Server: Packaging (cURL)). Supported     versions that are affected are 5.7.41 and prior and     8.0.32 and prior. Easily exploitable vulnerability     allows unauthenticated attacker with network access via     multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in     unauthorized access to critical data or complete access     to all MySQL Server accessible data. CVSS 3.1 Base Score     7.5 (Confidentiality impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
    (CVE-2022-43551)

  - Vulnerability in the Oracle Communications Network     Analytics Data Director product of Oracle Communications     (component: Install/Upgrade (Kerberos)). The supported     version that is affected is 23.1.0. Easily exploitable     vulnerability allows low privileged attacker with     network access via HTTP to compromise Oracle     Communications Network Analytics Data Director.
    Successful attacks of this vulnerability can result in     takeover of Oracle Communications Network Analytics Data     Director. CVSS 3.1 Base Score 8.8 (Confidentiality,     Integrity and Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
    (CVE-2022-42898)

  - Vulnerability in the Oracle Outside In Technology     product of Oracle Fusion Middleware (component: Third     Party (SQLite)). The supported version that is affected     is 8.5.6. Easily exploitable vulnerability allows low     privileged attacker with logon to the infrastructure     where Oracle Outside In Technology executes to     compromise Oracle Outside In Technology. Successful     attacks of this vulnerability can result in unauthorized     creation, deletion or modification access to critical     data or all Oracle Outside In Technology accessible data     as well as unauthorized access to critical data or     complete access to all Oracle Outside In Technology     accessible data and unauthorized ability to cause a     partial denial of service (partial DOS) of Oracle     Outside In Technology. CVSS 3.1 Base Score 7.3     (Confidentiality, Integrity and Availability impacts).
    CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L).
    (CVE-2022-46908)

  - Vulnerability in the Oracle Communications Diameter     Signaling Router product of Oracle Communications     (component: Platform (Microcode Controller)). The     supported version that is affected is 8.6.0.0. Easily     exploitable vulnerability allows low privileged attacker     with logon to the infrastructure where Oracle     Communications Diameter Signaling Router executes to     compromise Oracle Communications Diameter Signaling     Router. Successful attacks of this vulnerability can     result in unauthorized access to critical data or     complete access to all Oracle Communications Diameter     Signaling Router accessible data. CVSS 3.1 Base Score     5.5 (Confidentiality impacts). CVSS Vector:
    (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
    (CVE-2022-21123)

  - Vulnerability in the PeopleSoft Enterprise PeopleTools     product of Oracle PeopleSoft (component: Porting     (Cryptography)). Supported versions that are affected     are 8.59 and 8.60. Easily exploitable vulnerability     allows unauthenticated attacker with network access via     HTTPS to compromise PeopleSoft Enterprise PeopleTools.
    Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of     PeopleSoft Enterprise PeopleTools accessible data and     unauthorized ability to cause a partial denial of     service (partial DOS) of PeopleSoft Enterprise     PeopleTools. CVSS 3.1 Base Score 6.5 (Integrity and     Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).
    (CVE-2023-23931)

  - Vulnerability in the PeopleSoft Enterprise PeopleTools     product of Oracle PeopleSoft (component: Porting (Python     setuptools)). Supported versions that are affected are     8.59 and 8.60. Difficult to exploit vulnerability allows     unauthenticated attacker with network access via HTTP to     compromise PeopleSoft Enterprise PeopleTools. Successful     attacks of this vulnerability can result in unauthorized     ability to cause a hang or frequently repeatable crash     (complete DOS) of PeopleSoft Enterprise PeopleTools.
    CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS     Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).
    (CVE-2022-40897)

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5429 advisory.

  - Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version     4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution     in the context of the process running Wireshark. (CVE-2023-0666)

  - Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark     version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code     execution in the context of the process running Wireshark. (CVE-2023-0668)

  - ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of     service via packet injection or crafted capture file (CVE-2023-1161)

  - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1992)

  - LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1993)

  - GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet     injection or crafted capture file (CVE-2023-1994)

  - BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted     capture file (CVE-2023-2854, CVE-2023-2857)

  - Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     crafted capture file (CVE-2023-2855)

  - VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service     via crafted capture file (CVE-2023-2856)

  - NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     crafted capture file (CVE-2023-2858)

  - GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet     injection or crafted capture file (CVE-2023-2879)

  - XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     packet injection or crafted capture file (CVE-2023-2952)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3402 advisory.

  - ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of     service via packet injection or crafted capture file (CVE-2023-1161)

  - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1992)

  - LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1993)

  - GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet     injection or crafted capture file (CVE-2023-1994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1762-1 advisory.

  - ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of     service via packet injection or crafted capture file (CVE-2023-1161)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-152 advisory.

    ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of     service via packet injection or crafted capture file (CVE-2023-1161)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.4. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.0.4 advisory.

  - The ISO 15765 and ISO 10681 dissectors could crash. It may be possible to make Wireshark crash by     injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
    (CVE-2023-1161)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.0.4. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.0.4 advisory.

  - The ISO 15765 and ISO 10681 dissectors could crash. It may be possible to make Wireshark crash by     injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
    (CVE-2023-1161)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 3.6.12. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.6.12 advisory.

  - The ISO 15765 and ISO 10681 dissectors could crash. It may be possible to make Wireshark crash by     injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
    (CVE-2023-1161)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.6.12. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.6.12 advisory.

  - The ISO 15765 and ISO 10681 dissectors could crash. It may be possible to make Wireshark crash by     injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
    (CVE-2023-1161)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
207910	Debian dla-3906 : libwireshark-data - security update	Nessus	Debian Local Security Checks	critical
199495	RHEL 8 : wireshark (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199485	RHEL 9 : wireshark (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
196731	RHEL 6 : wireshark (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196709	RHEL 7 : wireshark (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
181506	GLSA-202309-02 : Wireshark: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
178627	Oracle Solaris Critical Patch Update : jul2023_SRU11_4_57_144_3	Nessus	Solaris Local Security Checks	critical
177382	Debian DSA-5429-1 : wireshark - security update	Nessus	Debian Local Security Checks	high
174962	Debian DLA-3402-1 : wireshark - LTS security update	Nessus	Debian Local Security Checks	high
173892	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wireshark (SUSE-SU-2023:1762-1)	Nessus	SuSE Local Security Checks	high
173874	Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-152)	Nessus	Amazon Linux Local Security Checks	high
172138	Wireshark 4.0.x < 4.0.4 A Vulnerability (macOS)	Nessus	MacOS X Local Security Checks	high
172137	Wireshark 4.0.x < 4.0.4 A Vulnerability	Nessus	Windows	high
172121	Wireshark 3.6.x < 3.6.12 A Vulnerability	Nessus	Windows	high
172120	Wireshark 3.6.x < 3.6.12 A Vulnerability (macOS)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2023-1161

high

Tenable Plugins

critical

critical

high

critical

critical

high

critical

high

high

high

high

high

high

high

high